signature-request
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely instructional and contains no executable code, scripts, or binaries. It functions as a template for the agent to follow when assisting users with document preparation.
- [DATA_EXFILTRATION]: There are no automated network requests or hidden data-sending commands. The skill relies on standard tools (Read, Glob, Grep) for local file inspection within the execution environment's allowed scope.
- [PROMPT_INJECTION]: The skill processes untrusted documents provided by users, which represents a surface for indirect prompt injection. However, the risk is negligible as the skill lacks high-privilege capabilities such as arbitrary code execution or outbound network access.
- Ingestion points: Processes documents via upload, URL, or reference (defined in SKILL.md Step 1).
- Boundary markers: No explicit delimiters or 'ignore' instructions for document content are present.
- Capability inventory: Accesses Read, Glob, and Grep tools (defined in YAML frontmatter).
- Sanitization: No sanitization or validation of the document content is performed before processing.
Audit Metadata