ascii-art-diagram-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted user inputs and local files while having access to system execution tools, establishing an attack surface for indirect prompt injection.\n- Ingestion points: User-provided text for ASCII art generation and project files accessed through Read and Grep tools (SKILL.md).\n- Boundary markers: The instructions do not define specific delimiters or security constraints to isolate processed data from the agent's instructions.\n- Capability inventory: The frontmatter authorizes the use of Bash(cmd:*), Write, and Edit tools, which could be abused if the agent interprets data as commands.\n- Sanitization: No input validation or filtering procedures are described to verify the integrity of the content before it is processed.
Audit Metadata