summarize
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could contain malicious instructions.
- Ingestion points: The skill accepts URLs, local PDF/image/audio files, and YouTube links as input (defined in SKILL.md).
- Boundary markers: No explicit boundary markers or 'ignore' instructions are provided in the skill body to prevent the model from obeying instructions embedded in the summarized content.
- Capability inventory: The skill executes the
summarizebinary, which may perform network requests and file reads. - Sanitization: No sanitization of input data is specified in the instruction set.
- [COMMAND_EXECUTION]: The skill's primary functionality is to execute the
summarizeCLI tool with user-provided arguments. - [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the
summarizebinary from a third-party Homebrew tap (steipete/tap/summarize).
Audit Metadata