resolve-beagle
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.
- Ingestion points: Untrusted data enters the agent's context through external research via
WebFetchand by reading user-provided specification files fromdocs/specs/. - Boundary markers: The workflow does not utilize delimiters or specific instructions to ignore embedded commands within the ingested data.
- Capability inventory: The agent has the ability to write to files (rewriting specifications), perform network operations (
WebFetch), and spawn subagents (Task). - Sanitization: There is no evidence of content validation or escaping before the data is processed or used to update local documents.
- [EXTERNAL_DOWNLOADS]: The skill uses
WebSearchandWebFetchto gather information from the internet to resolve research tasks. - [COMMAND_EXECUTION]: The skill employs
Grep,Glob, andReadtools to search and retrieve content from the local codebase.
Audit Metadata