asd-ste100
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a provided Python script (
scripts/ste-lint.py) to perform structural linting. The script uses only the Python standard library to perform regex-based linguistic analysis and does not initiate network connections or access sensitive system files. - [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary English input, which constitutes an attack surface for indirect prompt injection. However, the risk is mitigated by the skill's primary function of stripping ambiguity and simplifying text, and the agent is instructed to transform the text linguistically rather than execute any commands contained within it.
- [EXTERNAL_DOWNLOADS]: The installation instructions reference the author's GitHub repository and the
skills.shregistry. These are standard distribution channels for agent skills and do not represent a security threat in this context.
Audit Metadata