ai-agent-development
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements patterns for processing external datasets and user queries that are susceptible to indirect prompt injection.
- Ingestion points:
scripts/run-model-comparison.pyingest data from JSONL files, and the generated agent code inscripts/scaffold-agent.pyprocesses queries from environment variables. - Boundary markers: The generated system prompts lack explicit delimiters or instructions to ignore instructions within user data.
- Capability inventory: The skill enables LLM-driven actions via the Microsoft Agent Framework.
- Sanitization: While the
scripts/validate-agent-checklist.ps1tool checks for input validation, the generated scaffolding does not include sanitization logic by default.
Audit Metadata