The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose of assisting in hackathon project validation.
[NO_CODE]: This skill consists of instructional content and reference documentation without any executable scripts or binaries, reducing the potential for direct code execution vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface because it ingests untrusted text from project files (READMEs, source code) to perform its analysis. This could theoretically be used to influence the agent's scoring output if a user includes instructions designed to manipulate the model's judgment in their files.
Ingestion points: Reads arbitrary local files including README.md and various source code files as specified in SKILL.md.
Boundary markers: None present; the skill does not wrap processed content in delimiters or provide specific instructions to the model to ignore embedded commands.
Capability inventory: Functional scope is limited to file system 'read' operations for analysis and generating markdown text; no network transmission or command execution is invoked based on the untrusted content.
Sanitization: Content is analyzed as-is without filtering or validation.

Hedera Hackathon Submission Validator