style-dna
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Read,Glob, andWritetools to access the local file system. It reads text files from user-specified paths or folders and writes generated style guides to astyle-guides/directory. - [EXTERNAL_DOWNLOADS]: The skill fetches article content from external sources such as Substack or blogs using
WebFetchand a referenced tool namedsubstack-tools(which includessubstack_crawl.py). - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes untrusted text from external files and URLs. Ingestion points occur in
SKILL.md(Workflow Step 1). While the skill separates articles using---delimiters, it lacks specific instructions to ignore potential instructions embedded within the corpus. The agent's capabilities include file-system write access and network fetching, and no specific sanitization or filtering of the ingested content is defined.
Audit Metadata