skills-duplicate-detector
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external skill files (SKILL.md) sourced from multiple, potentially untrusted repositories. This creates an attack surface where instructions embedded in those files could influence the agent's behavior.
- Ingestion points: The agent is instructed to scan all files within a specified directory (e.g.,
/skills) and extract metadata, descriptions, and purpose statements. - Boundary markers: The instructions do not specify the use of clear delimiters or explicit directives for the agent to treat the analyzed content strictly as data rather than executable instructions.
- Capability inventory: The skill includes instructions for the agent to read files, compare content, and perform file management tasks such as moving duplicates to a
/duplicatesfolder. - Sanitization: No sanitization or validation logic is defined to prevent the agent from obeying instructions found inside the description or purpose fields of the files being audited.
Audit Metadata