signature-request

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill is purely instructional and contains no executable code, scripts, or binaries. It functions as a template for the agent to follow when assisting users with document preparation.
  • [DATA_EXFILTRATION]: There are no automated network requests or hidden data-sending commands. The skill relies on standard tools (Read, Glob, Grep) for local file inspection within the execution environment's allowed scope.
  • [PROMPT_INJECTION]: The skill processes untrusted documents provided by users, which represents a surface for indirect prompt injection. However, the risk is negligible as the skill lacks high-privilege capabilities such as arbitrary code execution or outbound network access.
  • Ingestion points: Processes documents via upload, URL, or reference (defined in SKILL.md Step 1).
  • Boundary markers: No explicit delimiters or 'ignore' instructions for document content are present.
  • Capability inventory: Accesses Read, Glob, and Grep tools (defined in YAML frontmatter).
  • Sanitization: No sanitization or validation of the document content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 08:50 AM
Security Audit — agent-trust-hub — signature-request