ctx-stats
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The instructions use strong overrides like 'CRITICAL' and explicitly command the agent to 'NOT summarize, do NOT collapse, do NOT paraphrase.' This is a technique used to bypass the agent's natural processing and filtering logic to ensure raw output is delivered.
- [INDIRECT_PROMPT_INJECTION]: The skill mandates that the agent render the entire output of the
mcp__context-mode__ctx_statstool verbatim, which creates a potential surface for processing malicious instructions if they appear within the tool's statistics (e.g., in metadata or filenames processed by other tools in the session). - Ingestion points: Output from the
mcp__context-mode__ctx_statstool. - Boundary markers: None present. The output is pasted directly into the response without delimiters.
- Capability inventory: Execution of the
mcp__context-mode__ctx_statstool. - Sanitization: Explicitly forbidden by the skill instructions.
Audit Metadata