no-ai-slop
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided content such as drafts, PR bodies, and commit messages. This creates a surface where a user could potentially embed malicious instructions. However, the skill instructions do not invoke any tools for file access, network communication, or command execution, meaning any injected instructions would have no dangerous side effects within the skill's limited text-processing context.
- [NO_CODE]: No executable code, scripts, or binary files are included in the skill package. The functionality is entirely defined by markdown instructions and basic YAML configuration.
- [EXTERNAL_DOWNLOADS]: The skill references an upstream repository for metadata purposes in SKILL.md but does not perform any runtime downloads or remote script executions.
Audit Metadata