thinking-science
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The core logic of the skill is dedicated to hypothesis testing and experimental design. No direct malicious code, persistence mechanisms, or credential theft patterns were detected.- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources, creating a potential surface for indirect injection. 1. Ingestion points: Uses WebSearch and WebFetch tools to gather evidence (SKILL.md). 2. Boundary markers: Absent; there are no specific instructions to the agent to treat external content as untrusted or to use delimiters. 3. Capability inventory: Includes Bash, Write, and WebFetch tools (SKILL.md). 4. Sanitization: Absent.
Audit Metadata