use-terminology

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external project documents and instructions to perform terminology corrections, which creates a vulnerability surface for malicious instructions embedded in the processed data.
  • Ingestion points: The skill reads "directly managed documents", "project instructions", and "terminology entry points" as described in SKILL.md.
  • Boundary markers: There are no explicit instructions or delimiters defined to separate ingested content from the agent's internal instructions or to ignore embedded commands.
  • Capability inventory: The skill is authorized to modify files by fixing terminology and expression problems in "directly managed documents" as specified in SKILL.md.
  • Sanitization: No specific sanitization, filtering, or validation logic is defined for the content read from external documents before it is processed and used to perform edits.
  • [NO_CODE]: The skill consists entirely of Markdown instructions and reference documentation. It does not contain any executable scripts, binary files, or automated installation procedures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 07:21 AM
Security Audit — agent-trust-hub — use-terminology