honey-compress
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and modifies local memory and context files (such as CLAUDE.md or project notes) which are considered external data sources.
- Ingestion points: The skill reads user-specified files from the local filesystem to perform its compression task (SKILL.md).
- Boundary markers: The instructions include explicit directives to 'Keep exact — never compress' load-bearing rules and directives, which helps maintain the integrity of existing instructions.
- Capability inventory: The agent utilizes file system tools to read the source files, create backup copies (e.g., FILE.original.md), and overwrite the original files with the compressed version.
- Sanitization: There is no specific sanitization or filtering of the file content before it is re-processed by the agent, though the instructions restrict the scope to prose only.
Audit Metadata