llms-visibility
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious prompt injection patterns were detected. The instructions follow standard educational and implementation guidance without attempting to override agent safety filters or core behaviors.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths were found. The network operations described (such as
curlcommands in the verification section) are limited to checking public HTTP headers and standard files on the user's own domain. - [OBFUSCATION]: The content was analyzed for Base64 encoding, zero-width characters, homoglyphs, and other obfuscation techniques; no hidden malicious content was identified.
- [EXTERNAL_DOWNLOADS]: The skill does not perform or instruct the agent to perform any unverified external downloads or script executions. References to external tools like
acceptmarkdown.comandisitagentready.comare for legitimate website verification purposes. - [COMMAND_EXECUTION]: No dangerous command execution patterns (like shell piping to bash or privilege escalation) were found. Benign use of
curlis suggested for manual verification of HTTP responses. - [DYNAMIC_EXECUTION]: The provided code snippets are static examples for implementation by the developer and are not executed dynamically by the skill itself.
- [PERSISTENCE_MECHANISMS]: No attempts to establish persistence (such as modifying shell profiles or cron jobs) were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill focuses on providing structured, clean data (Markdown) to LLMs, which generally reduces the risk of parsing errors compared to complex HTML. It does not ingest untrusted data in a way that creates a vulnerability surface for the agent following the instructions.
Audit Metadata