using-skills
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill defines a protocol for ingesting content from external images and PDFs via the
look-atutility, creating an indirect prompt injection surface where the agent processes and acts upon untrusted data. (1) Ingestion points: External media files processed bylook_at.pyas described in SKILL.md. (2) Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded content within the extracted media data. (3) Capability inventory: The agent has access to file system operations, tool execution via Bash, and task delegation via the Task tool. (4) Sanitization: No evidence of sanitization or filtering is provided for the output of the media extraction tool. - [COMMAND_EXECUTION]: The skill utilizes
uv run python3to execute local scripts likelook_at.pyandskill-metadata.pywithin the plugin root for operational tasks. - [EXTERNAL_DOWNLOADS]: References the
obra/superpowersrepository on GitHub as a source for development and behavioral patterns.
Audit Metadata