privacy-policy
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a document generation assistant. No malicious patterns such as command execution, data exfiltration, or obfuscation were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill allows for the ingestion of external data by visiting a user-provided URL to research product details. 1. Ingestion points: Web research via the $PRODUCT_URL input in SKILL.md. 2. Boundary markers: Absent; the skill does not define specific delimiters for external content. 3. Capability inventory: The skill is limited to text generation and web browsing; it has no access to dangerous tools like shell execution or local file writing. 4. Sanitization: Absent.
Audit Metadata