jev
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the
@friqdev/jev-kitandaipackages via package managers. The@friqdev/jev-kitpackage is associated with the skill author, andaiis a well-known library from Vercel. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that ingests untrusted text data for classification and decision-making purposes.
- Ingestion points: Untrusted data enters the agent context through the
stateobject passed to thejev.evaluatefunction (e.g.,subjectandbodyfields in the provided example). - Boundary markers: The skill emphasizes structured output via a
QuestionMapbut does not define explicit delimiters for the input text, relying on the model's internal classification capabilities. - Capability inventory: Decision results from the model (e.g., urgency, category, severity) are used to determine automated actions, such as routing tickets or triggering alerts.
- Sanitization: The skill includes a clear safety warning stating that the model is not a security boundary and will process adversarial or injected content literally, advising users not to use it for intent-gating on untrusted input without additional controls.
Audit Metadata