nlp-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface (Category 8).
- Ingestion points: The skill processes external text data through variables like 'text', 'documents', and 'texts' across various functions including 'preprocess', 'fit_transform', 'polarity_scores', 'ner', and 'encode' (SKILL.md).
- Boundary markers: The skill does not implement delimiters or provide instructions for the agent to ignore potentially embedded commands in the input data.
- Capability inventory: The skill is focused on data processing and utilizes standard libraries such as nltk, scikit-learn, transformers, and bertopic; it does not contain subprocess calls, file-write operations, or network exfiltration logic (SKILL.md).
- Sanitization: No sanitization, escaping, or validation logic is present to filter malicious instructions from the analyzed documents.
- [EXTERNAL_DOWNLOADS]: The skill contains commented-out instructions to fetch linguistic models and data using 'nltk.download()'. This refers to official and trusted resources provided by the NLTK project.
- [SAFE]: The skill mentions a local virtual environment activation path ('/Users/zhangmingda/clawd/.venv/bin/activate'). While this reveals a local username, it is provided as a setup instruction for the user and does not involve automated access or exfiltration of sensitive data.
Audit Metadata