updating-knowledge
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious override patterns or safety bypass attempts were detected. The instructions are focused on guiding the agent's research methodology and ensuring output quality.
- [DATA_EXFILTRATION]: No evidence of sensitive file access or unauthorized data transmission. The skill uses standard search and fetch tools as intended for information gathering.
- [REMOTE_CODE_EXECUTION]: No patterns for downloading and executing untrusted scripts or installing unverifiable packages were identified.
- [PROMPT_INJECTION]: The skill processes untrusted web content, creating an indirect prompt injection surface. Ingestion points: Untrusted data enters the agent context via
web_searchandweb_fetchtools (SKILL.md). Boundary markers: Instructions do not specify delimiters or isolation for fetched content. Capability inventory: The skill has access to search, fetching, and internal document tools (GitHub, Drive); it does not request destructive command execution or file-system write access. Sanitization: No sanitization or escaping instructions are present. Mitigation: The research methodology requires cross-validating claims across a minimum of three independent sources, which functionally reduces the risk of being influenced by a single malicious source.
Audit Metadata