one-sentence-elevator-pitch
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions and prompt templates. There are no scripts, binaries, or automated shell commands associated with this skill.\n- [SAFE]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns were detected.\n- [NO_CODE]: The skill does not include any source code or script files, which significantly reduces the attack surface for most technical vulnerabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides templates that ingest untrusted user content (raw product descriptions).\n
- Ingestion points: Placeholder '[PASTE PRODUCT NOTES]' in SKILL.md.\n
- Boundary markers: None; content is directly interpolated into the prompt.\n
- Capability inventory: None; the skill does not request or use any tools or system capabilities.\n
- Sanitization: None; the skill relies on the base LLM's intrinsic safety filters for processing external notes.
Audit Metadata