ai-engineer
Warn
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill references standard, reputable libraries for installation.
- [PROMPT_INJECTION] (MEDIUM): The skill implements RAG and prompt management workflows that are susceptible to Indirect Prompt Injection.
- Ingestion points: Untrusted text data is ingested in
scripts/setup_rag.pythrough theload_documents_from_directoryfunction. - Boundary markers: Absent; prompt templates in
references/prompt_templates.md(e.g., RAG QA) directly interpolate{context}and{question}without protective delimiters. - Capability inventory: The skill has the capability to perform network requests to LLM APIs (OpenAI/Anthropic) and modify local storage via ChromaDB.
- Sanitization: Absent;
PromptTemplate.renderinscripts/monitor_ai_service.pyuses raw Python string formatting without escaping or validating interpolated content.
Audit Metadata