shortform-format-library
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides and references scripts for data validation and telemetry. Specifically,
README.mdandSKILL.mdinstruct the agent to usescripts/validate_library.pyto verify the integrity of content snapshots. Additionally,references/repository-integration.mdincludes shell commands to runtelemetry/version_check.pyandtelemetry/telemetry_log.pywhen integrated into a larger repository environment. These scripts are utility-focused and follow standard development practices. - [EXTERNAL_DOWNLOADS]: The documentation in
references/production-and-delivery.mdincludes several links to the Overlap AI documentation (docs.overlap.ai) for API reference and clip prompting. These are informational links to a well-known automation service used to assist the agent in drafting accurate technical briefs, not for remote code execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources such as 'content spikes', analytics screenshots, and social media metrics (
SKILL.md,references/research-and-learning.md). While this constitutes a potential attack surface for indirect prompt injection, the risk is mitigated by:- Ingestion points: Data enters through user-provided JSON snapshots and research media.
- Boundary markers:
SKILL.mdcontains explicit instructions to 'label editorial scores as judgments' and to 'distinguish topic signals from post outliers', preventing the agent from blindly following embedded instructions in the data. - Capability inventory: The skill's primary capabilities are limited to generating markdown tables, production briefs, and running the local validator script.
- Sanitization: The
scripts/validate_library.pyutility enforces a strict schema for the data interchange format, checking for valid URL schemes, timestamps, and numeric types.
Audit Metadata