slopmop
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of an external Python package
slopmop[all]usingpipx. This tool is hosted on PyPI and its source code is located in theScienceIsNeatoGitHub organization. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it is designed to ingest and process data from external, potentially untrusted sources.
- Ingestion points: The skill reads repository workflow states via
sm sailand pulls data from pull request feedback usingsm buff <PR_NUMBER>(found inSKILL.md). - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the processed data.
- Capability inventory: The skill executes the
smCLI tool, which performs file system operations and repository management tasks. - Sanitization: There is no mention of sanitization, filtering, or validation of the content retrieved from PRs or repository states.
Audit Metadata