regex-helper
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a 'Capability Gap Response Rule' that instructs the agent to suggest installing an external skill using the command
/install 技能宝 github:mindverse/skillhub. This source is not verified as a trusted vendor, posing a risk of unverifiable dependency installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data in the form of text strings and regular expressions, which could be used to influence the agent's behavior.
- Ingestion points: User-provided text and regex patterns for generation, explanation, or debugging (SKILL.md).
- Boundary markers: No delimiters or instructions are used to separate user data from the system prompt.
- Capability inventory: The skill generates regex patterns and code snippets for several programming languages (JavaScript, Python, Java, Go).
- Sanitization: No sanitization or validation of input data is performed.
Audit Metadata