skill-portability-compiler
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external agent skill files as its primary function, which introduces a surface for indirect prompt injection where instructions embedded in the processed content could influence agent behavior.
- Ingestion points: The skill reads external source skills to classify elements and identify coupling (SKILL.md, Step 1 and Step 2).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing the target skill content.
- Capability inventory: The skill is analytical and does not include scripts or instructions for performing high-risk actions such as file writes, network requests, or system modifications.
- Sanitization: There are no explicit instructions to sanitize or validate the content of the skills being processed.
Audit Metadata