summarize
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its core summarization features. Ingestion points: Untrusted data enters the agent context via URL content fetched using
curlorweb fetchand via local files read by the agent (defined in SKILL.md). Boundary markers: Absent; the instructions do not define delimiters or provide warnings to ignore instructions embedded within the fetched content. Capability inventory: The skill utilizescurlfor network operations and possesses file system read capabilities (defined in SKILL.md). Sanitization: Absent; no escaping, validation, or filtering of the external content is implemented before processing.- [EXTERNAL_DOWNLOADS]: The skill instructions explicitly direct the agent to usecurlor web fetching tools to download content from external URLs to perform summarization.- [COMMAND_EXECUTION]: The skill uses thecurlcommand-line tool to retrieve data from remote servers as part of its URL summarization workflow.
Audit Metadata