report-me
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates user-provided content via the $ARGUMENTS variable directly into an operational command.
- Ingestion points: The $ARGUMENTS placeholder in SKILL.md allows untrusted user data to enter the agent context.
- Boundary markers: No delimiters (such as XML tags or triple quotes) or 'ignore' instructions are used to isolate user input from the skill's instructions.
- Capability inventory: The skill invokes the /report-coaching command to process the input.
- Sanitization: There is no evidence of sanitization or filtering applied to the input before interpolation.
- [NO_CODE]: The skill contains no executable scripts, binaries, or complex automation logic, consisting solely of configuration and instructional text.
Audit Metadata