algo-seo-tfidf
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a transparent implementation of classic information retrieval algorithms. The provided Python script and reference documents correctly follow mathematical standards for TF-IDF and BM25 scoring without any hidden behaviors.
- [SAFE]: All logic is contained within local files and scripts. The Python implementation in scripts/tfidf.py relies exclusively on the standard library (argparse, json, math, re, collections) and performs no network operations, file-system modifications, or subprocess executions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external document corpora provided via JSON files.
- Ingestion points: The compute function in scripts/tfidf.py reads text content from a 'documents' array in the input JSON.
- Boundary markers: The script employs alphanumeric tokenization via regex ([A-Za-z0-9']+), which naturally restricts processing to safe characters and excludes potential control sequences or injection payloads.
- Capability inventory: The skill's capabilities are limited to mathematical scoring and dictionary manipulation. It lacks any exploitable tools such as shell access, file-writing, or network connectivity.
- Sanitization: Input text is lowercased and filtered through a strict alphanumeric regex during the tokenization phase, ensuring that only expected textual tokens are processed.
Audit Metadata