aeo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses deterministic Python scripts to audit and optimize content, avoiding dangerous patterns like dynamic code execution or remote script invocation.
- [SAFE]: Network activity is restricted to fetching content for auditing via the standard library's urllib module, with no evidence of exfiltration or communication with suspicious external endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from URLs and files, representing a potential surface for indirect prompt injection. 1. Ingestion points: Content fetched in aeo_audit.py or read in aeo_optimizer.py. 2. Boundary markers: Reports are formatted in Markdown without explicit injection-prevention delimiters. 3. Capability inventory: Includes network fetching and file writing. 4. Sanitization: Analysis is performed via regex, which does not execute content as instructions, effectively mitigating the risk.
- [SAFE]: Local state management for citation tracking follows standard practices, storing data in the user's home directory without telemetry.
Audit Metadata