ascii-ansi-colorizer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The Python script
scripts/colorize.pyuses only standard library modules such asargparse,sys, anddataclassesto perform string manipulation. It does not perform any network operations, sensitive file access, or system command execution. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external text input. 1. Ingestion points:
scripts/colorize.pyreads data from the user viasys.stdin.read(). 2. Boundary markers: TheSKILL.mdfile defines instructions to outputcoloredTextseparately from aplainTextFallback, which helps the agent distinguish between formatted data and instructional content. 3. Capability inventory: The script is limited to printing ANSI-formatted strings to standard output and lacks access to dangerous APIs, subprocesses, or network calls. 4. Sanitization: The script iterates through the input character by character and wraps visible characters in literal ANSI escape sequences, ensuring the input is treated as text rather than instructions.
Audit Metadata