antislop

Fail

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches updated writing patterns and community guidelines from Wikipedia's official MediaWiki API. This targets a well-known service for legitimate data retrieval to keep the skill's detection database current.
  • [COMMAND_EXECUTION]: Utilizes shell commands (curl and python3) within its refresh protocol to automate the retrieval and parsing of updated detection patterns. The Python code used for parsing is a hardcoded one-liner that performs safe JSON processing.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted text to perform AI detection and automated editing, creating an attack surface for embedded instructions.
  • Ingestion points: Ingests arbitrary text from the user or external files via the agent interface for AI detection (slop check).
  • Boundary markers: Lacks explicit delimiters or instructions to the model to ignore potential commands or role-play markers embedded within the text being analyzed.
  • Capability inventory: Possesses Read, Edit, and Write tool access, along with the ability to execute shell commands to update its own detection rules.
  • Sanitization: Does not specify methods for sanitizing, escaping, or filtering the input content before it is processed by the agent's detection logic.
Recommendations
  • HIGH: Downloads and executes remote code from: https://en.wikipedia.org/w/api.php?action=parse&page=Wikipedia:Signs_of_AI_writing&prop=wikitext&format=json, https://en.wikipedia.org/w/api.php?action=parse&page=Wikipedia:WikiProject_AI_Cleanup&prop=wikitext&format=json - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 25, 2026, 12:08 PM