style-learner
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The module
modules/feature-extraction.mdutilizes shell tools likeawk,grep, andwcto analyze file metrics. - [DYNAMIC_EXECUTION]:
modules/feature-extraction.mdincludes a Python script for sentence splitting and statistical analysis. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted markdown content into the agent's context and incorporates it into generation prompts, which can be exploited for indirect prompt injection.
- Ingestion points: Local markdown files via
**/*.mdglobs. - Boundary markers: The skill uses blockquotes as delimiters for exemplar text.
- Capability inventory: Uses
Bash,Read,Write, andEdittools. - Sanitization: There is no evidence of sanitization or validation of the ingested exemplar content.
Audit Metadata