ascii-table-renderer

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a local utility for rendering data as aligned ASCII tables. Technical review confirms the logic is limited to text manipulation and terminal output formatting.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface where it processes JSON-formatted content provided by the agent or user.
  • Ingestion points: Data is read from standard input via sys.stdin.read() in scripts/render_table.py.
  • Boundary markers: Neither the script nor the instructional markdown define explicit delimiters or safety instructions to ignore embedded commands within the processed input data.
  • Capability inventory: Analysis of scripts/render_table.py, SKILL.md, and examples/basic.md reveals no capabilities for network operations, file system modifications, subprocess execution, or dynamic code evaluation.
  • Sanitization: The Python script stringifies all input data using the _stringify function and applies strict width-based truncation, which limits the potential for control character exploitation or display-based attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 02:44 AM