deslop
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill functions by analyzing and modifying code content, creating a vulnerability surface where instructions hidden in code could influence the agent.
- Ingestion points: Reads code diffs and file contents via
git diffas specified inSKILL.md. - Boundary markers: Absent. The instructions do not include delimiters or specific warnings to ignore instructions embedded within the code comments or content being processed.
- Capability inventory: The skill instructs the agent to "Remove identified slop while preserving legitimate changes," which involves writing to the local filesystem.
- Sanitization: Absent. There is no specified logic for sanitizing or escaping the content of the diffs before the agent processes them.
Audit Metadata