tslj-title
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any executable code, scripts, or system commands. No obfuscation, persistence mechanisms, or credential theft patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill relies on analyzing user-supplied video transcripts or descriptions to generate titles, which creates a surface for potential indirect prompt injection. However, the lack of tool access significantly limits the risk. 1. Ingestion points: User-provided video content and dialogue descriptions processed in the workflow described in SKILL.md. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore instructions embedded within the user data. 3. Capability inventory: The skill is restricted to text generation; it has no access to shell tools, network operations, or file system writes. 4. Sanitization: No sanitization or filtering is performed on the input content before it is processed by the agent.
Audit Metadata