prompt-pro
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides extensive documentation and tooling for interpolating external data into prompts, which inherently creates an attack surface for indirect prompt injection.\n
- Ingestion points: Data enters the system through
test_case.inputin thescripts/optimize-prompt.pyutility and via various template placeholders defined inreferences/prompt-templates.mdandassets/prompt-template-library.md.\n - Boundary markers: The skill advocates for the use of clear step markers, numbered instructions, and explicit delimiters to maintain output consistency (see
references/chain-of-thought.md).\n - Capability inventory: The
scripts/optimize-prompt.pyutility allows for automated interaction with LLM providers to evaluate prompt quality and efficiency.\n - Sanitization: The
references/prompt-templates.mdfile provides aValidatedTemplateimplementation that demonstrates how to validate input variables (type, range, and enum choices) before they are rendered into the final prompt context.
Audit Metadata