patent-review
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection attacks because it processes external patent documentation and has access to high-privilege tools.
- Ingestion points: Reads untrusted content from the
patent/directory in SKILL.md, includingCLAIMS.md,specification/files, andPRIOR_ART_REPORT.md. - Boundary markers: Lacks explicit delimiters or instructions in SKILL.md to the model to ignore embedded commands within the processed data.
- Capability inventory: The skill uses
Bash(*),Write, andEdittools in SKILL.md, which could be exploited to execute commands or modify files. - Sanitization: There is no evidence of content validation or escaping of the ingested patent data in the workflow defined in SKILL.md.
Audit Metadata