blog-style
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a Python script
scripts/style_learn.pyto analyze local user files. - [NO_CODE]: The functional script
scripts/style_learn.pyreferenced in the instructions was not included in the provided skill package for direct analysis. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes untrusted external content provided by the user.
- Ingestion points: Reads content from files with
.md,.mdx, and.txtextensions from user-specified paths. - Boundary markers: No explicit markers or "ignore instructions" delimiters are defined for the analysis phase.
- Capability inventory: Executes local shell commands (
python3) to perform the analysis as defined in SKILL.md. - Sanitization: There is no mention of sanitization, escaping, or filtering for the content of the processed blog posts.
Audit Metadata