terms-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted data (Terms of Service and Privacy Policies) provided by the user. This creates a surface for indirect prompt injection if the analyzed text contains malicious instructions.
- Ingestion points: User-provided document text or excerpts analyzed via the provided methodology.
- Boundary markers: While the skill uses markdown headers and examples to structure output, it lacks explicit "ignore instructions" delimiters to protect the agent from adversarial content within the documents being analyzed.
- Capability inventory: The skill focuses on text analysis and categorization; however, it references a custom MCP server that may provide additional capabilities.
- Sanitization: No input validation or sanitization routines are defined in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the
@clawfu/mcp-skillsNode.js package in its YAML frontmatter to provide the necessary MCP server environment.
Audit Metadata