Skills
Navigate
skills/light-cheng/skills-3rdparty/wait-what/Gen Agent Trust Hub

wait-what

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions in SKILL.md direct the agent to utilize external files, specifically GLOSSARY.md and GLOSSARY-MAP.md, to inform its output.
  • Ingestion points: The agent is instructed to read GLOSSARY.md and GLOSSARY-MAP.md from the repository at runtime.
  • Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within these glossary files.
  • Capability inventory: The skill contains no scripts, executable code, or network-enabled tools; it is purely instructional.
  • Sanitization: No sanitization or validation of the glossary content is specified.
  • [EXTERNAL_DOWNLOADS]: The UPSTREAM.md file contains documentation for installing the skill using npx from a GitHub repository.
  • Evidence: npx skills add light-cheng/skills-3rdParty#v0.3.1 --yes --copy --agent codex
  • Context: These are standard installation instructions for the skill and do not represent a runtime remote code execution vulnerability within the skill's operational logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:50 PM