aligncheck
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of Markdown instructions for text analysis. It contains no scripts, shell commands, or binary files that could be executed by the agent.
- [SAFE]: No network access, sensitive file path interactions, or hardcoded credentials were found. The 'disable-model-invocation: true' frontmatter limits the agent's ability to call external tools or other models.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted text provided by the user, which presents a surface for indirect prompt injection.
- Ingestion points: Processes 'product' text (AI summaries/reports) and 'source' documents (conversations/tickets) provided in the chat context (described in SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the analyzed text.
- Capability inventory: The skill has no capabilities to execute code, write to files, or access the network.
- Sanitization: There are no requirements for sanitizing or filtering the processed input text.
Audit Metadata