protocol-standardization
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data, such as raw experimental notes or notebook fragments, which could potentially contain malicious instructions.
- Ingestion points: The skill ingests 'User task description' and 'Primary input material' (text, file paths, or literature) as described in
SKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts within the source material.
- Capability inventory: The skill is limited to text organization and documentation. It lacks any active capabilities such as network access, file writing (beyond its primary output), or shell command execution across its scripts and references.
- Sanitization: There is no evidence of specific sanitization or filtering applied to the input text.
- [SAFE]: The skill contains no executable scripts, hardcoded credentials, or network dependencies. The implementation relies entirely on markdown templates and reference guides to structure text, maintaining a static and safe execution environment.
Audit Metadata