competition-malware-config
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow for analyzing untrusted malware samples, which introduces an indirect prompt injection surface where the agent might interpret data within the sample as instructions.
- Ingestion points: The skill instructs the agent to inspect resources, embedded archives, and strings from user-provided samples, as detailed in
SKILL.mdandreferences/malware-config.md. - Boundary markers: No specific delimiters or instructions are provided to ensure the agent treats the content of the malware samples as data rather than instructions.
- Capability inventory: No executable scripts or direct command execution logic are present within the skill's files.
- Sanitization: There are no requirements or methods defined for sanitizing or validating the contents of the analyzed samples.
Audit Metadata