anthropic-prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Prompt Injection] (SAFE): The content consists of instructional guidelines for Anthropic's prompt engineering techniques. No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file paths, or network operations (e.g., curl, wget) are present in the documentation.
- [Obfuscation] (SAFE): No Base64 encoding, zero-width characters, or homoglyph-based obfuscation techniques were found.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill does not define any external package dependencies (pip, npm) or remote script execution patterns.
- [Indirect Prompt Injection] (LOW): The skill's stated purpose involves processing untrusted user inputs (existing prompts) to provide improvements. While this creates an ingestion surface for potential injection, the provided file lacks any tool or code definitions that could perform write operations or system-level actions, limiting the impact to text-based reasoning.
- [Metadata Poisoning] (SAFE): Metadata fields (name, description) accurately describe the skill's purpose as a prompt engineering utility.
Audit Metadata