DetectAI
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bunruntime to execute local TypeScript tools includingPangramScore.ts,StatSignals.ts, andWatermarkScan.tslocated in the~/.claude/LIFEOS/TOOLS/directory. It also performs local network requests viacurltolocalhost:31337for notification purposes. These operations are restricted to the local environment and the skill's defined tooling. - [EXTERNAL_DOWNLOADS]: The skill communicates with the external Pangram API at
pangram.comto retrieve empirical AI detection scores. User-supplied text is sent to this service for analysis as part of the core functionality. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it ingests and processes untrusted user-supplied text. 1. Ingestion points: Text is provided by the user via command-line arguments or stdin to the analysis tools. 2. Boundary markers: The skill does not define specific delimiters to isolate the text being analyzed from agent instructions. 3. Capability inventory: The skill has access to subprocess execution and local network communication. 4. Sanitization: The skill documentation does not mention any sanitization or filtering of the content being analyzed.
Audit Metadata