ln-812-optimization-researcher
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of external and local data.
- Ingestion points: The skill ingests data from external
WebSearchresults (Phases 1 and 2) and local codebase files scanned viagrep(Phase 3). - Boundary markers: No delimiters or instructions to ignore embedded commands are implemented for the processed data.
- Capability inventory: The skill has access to
WebSearchand local file scanning tools. - Sanitization: No evidence of sanitization or validation of the retrieved content is present before it is used to generate hypotheses.
- [COMMAND_EXECUTION]: The skill performs automated searches of the local environment using keyword patterns.
- Evidence: The Phase 3 workflow and
research_query_templates.mdinstruct the agent to usegrepto find strings such asredis,memcache,pool_size, andmax_connectionsin project source and configuration files.
Audit Metadata