onnx-converter
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for ONNX conversion tasks and does not include any executable code or malicious patterns. The tool permissions listed in the frontmatter are platform configurations that scope the skill's environment and do not constitute a security finding.- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing untrusted user input while having access to sensitive tools; however, this is aligned with its primary purpose and carries a safe verdict.
- Ingestion points: Processes user input triggered by phrases such as 'onnx converter' (SKILL.md).
- Boundary markers: No explicit delimiters or safety instructions for handling embedded commands in user data are present.
- Capability inventory: Utilizes
Bash(cmd:*),Write, andEdittools (SKILL.md). - Sanitization: No evidence of input validation or sanitization mechanisms.
Audit Metadata