base64-parser
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and decodes arbitrary Base64 data from user input or files, which could contain malicious instructions intended to manipulate the agent's logic.\n
- Ingestion points: Data enters through command-line arguments, stdin, or file reads in
scripts/base64_tool.py.\n - Boundary markers: While the 'pretty' output mode uses horizontal line separators, there are no specific security delimiters to prevent instruction injection.\n
- Capability inventory: The script performs filesystem reads and writes as part of its core functionality, and the skill is granted
ReadandWritepermissions.\n - Sanitization: Decoded output is not sanitized before being returned to the agent or written to files.
Audit Metadata