convert-to-devto
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities were identified. The skill functions as a technical editor, applying specific formatting rules to Markdown text without the use of external scripts or system-level tools.
- [DATA_EXPOSURE]: The skill instructions contain a reference to '${{ secrets.GEMINI_API_KEY }}'. This is used as a contextual example for how the agent should handle GitHub Actions secrets in user-provided documentation, not as an actual hardcoded credential.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data through the '{{args}}' parameter. Although this creates an attack surface, the risk is negligible as the skill lacks any 'allowed-tools' or capabilities to execute commands or reach the network. 1. Ingestion points: Input markdown provided via '{{args}}' in SKILL.md. 2. Boundary markers: The input is delimited by '<input_markdown>' tags. 3. Capability inventory: No tools are enabled for this skill. 4. Sanitization: The instructions focus on formatting rules rather than security sanitization, but the lack of capabilities prevents exploitation.
Audit Metadata