research-analyst
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWPROMPT_INJECTION
Full Analysis
- Prompt Injection (LOW): The skill is susceptible to Indirect Prompt Injection (Category 8) because its core function involves processing untrusted external web content.\n
- Ingestion points: Untrusted data enters the agent context through the
WebFetchandWebSearchtools mentioned in theSKILL.mdfrontmatter.\n - Boundary markers: The instructions in
SKILL.mddo not include delimiters or specific instructions to treat fetched content as untrusted or to ignore embedded instructions.\n - Capability inventory: Based on
SKILL.md, theallowed-toolsareRead,Grep,Glob,WebSearch, andWebFetch. There are no capabilities for writing files, executing system commands, or performing arbitrary network exfiltration.\n - Sanitization: No sanitization, validation, or filtering of external content is described or mandated in the skill instructions.
Audit Metadata