business-copy-style

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a workflow for copy editing using local scripts (scripts/copy-lint.sh, scripts/copy-compare.py) that perform deterministic text analysis. These scripts rely on standard logic for counting syllables, words, and sentences to calculate readability metrics like the Flesch-Kincaid grade.
  • [COMMAND_EXECUTION]: The Python and Shell scripts are focused on text processing. The detected usage of subprocess.run in tests/test_copy_lint.py is confined to unit tests that execute the skill's own local scripts with controlled inputs, which is standard development practice and poses no security threat.
  • [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive filesystem paths (such as SSH keys or environment files) were found in the skill or its associated scripts. The scripts do not perform any network operations to external domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text files for analysis, which is an inherent ingestion surface. However, the skill lacks dangerous capabilities such as network access, system configuration access, or privileged file operations that would allow a malicious input to cause harm. The risk is minimal and consistent with the intended purpose of the tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:08 AM