text-watermark-fountain
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary logic is contained within local Python scripts (encode.py, decode.py, lt_code.py). These scripts use standard mathematical libraries and perform character counting to implement watermarking. No malicious behaviors such as network exfiltration, credential access, or unauthorized file system operations were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill involves the agent processing external text to extract watermarks. While this constitutes an ingestion surface for untrusted data, the processing is performed by a deterministic Python script that calculates segment lengths via regex and character counts. This approach prevents the agent from interpreting the text content as instructions during the decoding phase, effectively mitigating the risk of indirect injection.
Audit Metadata