info-gathering
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill framework includes a phase for technical verification through reproduction experiments. It suggests executing minimal code snippets to verify API behavior or bug reports.
- Evidence:
references/tech-research-methods.mdprovides instructions for running code in sandboxed environments using commands likenode -e,python -c, anddocker run. - [EXTERNAL_DOWNLOADS]: The skill encourages gathering information from external technical and academic resources. These include well-known services and repositories which are considered trusted sources for configuration and documentation.
- Evidence:
references/tech-research-methods.mdreferences official documentation sites, GitHub repositories, and package registries like npm and PyPI. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to fetch and summarize content from the web, it is naturally exposed to data from untrusted third parties which could contain malicious instructions.
- Ingestion points: Web search results, GitHub issues, and external documentation files accessed during the execution phase in
SKILL.md. - Boundary markers: The skill lacks explicit technical delimiters to isolate fetched content from agent instructions, though it emphasizes critical evaluation of source reliability in
references/evaluation-guide.md. - Capability inventory: Includes the ability to execute code snippets via
node,python, ordockerand perform web requests using search operators. - Sanitization: Relies on manual verification steps (CRAAP/SIFT) rather than automated content sanitization.
Audit Metadata