researchers-verifier
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION] (LOW): Detected a surface for Indirect Prompt Injection through the systematic ingestion of untrusted external and internal data.\n
- Ingestion points: The skill is instructed to use
WebFetchto verify arbitrary URLs andRead/Grepto analyze research files which may contain attacker-controlled content.\n - Boundary markers: Absent. There are no instructions defining delimiters (e.g., XML tags) or providing 'ignore embedded instructions' warnings when the agent processes the fetched content.\n
- Capability inventory: The agent has access to
Write,Edit, andWebFetchtools. If a malicious instruction were embedded in a verified source, the agent could be tricked into modifying local files or exfiltrating data to an external server.\n - Sanitization: No sanitization or validation logic is present to filter executable instructions or malicious prompts from the retrieved data.
Audit Metadata