content-humanizer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes and executes local Python scripts (
ai_pattern_detector.py,content_scorer.py,readability_scorer.py) to analyze text metrics. These scripts use only standard Python libraries and do not perform any network operations or sensitive file access. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user-provided text drafts, which introduces a potential surface for indirect prompt injection.
- Ingestion points: User-provided content drafts are processed by the agent during humanization workflows.
- Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate user content from the agent's instructions.
- Capability inventory: The agent is authorized to execute included Python scripts via shell commands and perform content rewriting.
- Sanitization: No explicit input validation or sanitization of user-provided content is performed within the skill's logic.
Audit Metadata