proof
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a data ingestion surface for untrusted content.
- Ingestion points: Processes text from inline messages, IDE selections, and specified file paths (SKILL.md).
- Boundary markers: Instructions do not specify the use of delimiters or 'ignore' commands for the input text.
- Capability inventory: The skill is authorized to use file-editing tools to modify content (SKILL.md).
- Sanitization: There are no instructions for sanitizing or escaping the text before processing or editing.
Audit Metadata