Agent Development
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines patterns for agents that ingest untrusted external data (such as source code), creating an attack surface for indirect prompt injection.\n- Ingestion points: Agents built from these templates use tools like
Read,Grep, andGlobto ingest workspace files and utilizeCLAUDE.mdfor context.\n- Boundary markers: The provided system prompt templates do not explicitly include instructions to use delimiters or boundary markers to separate untrusted data from instructions.\n- Capability inventory: Example templates include agents with powerful capabilities such as file modification (Write) and arbitrary command execution (Bash).\n- Sanitization: The documentation lacks specific guidance on sanitizing or validating ingested content before it is processed by the agent's core logic.
Audit Metadata