skills/lovstudio/skills/lov-bp-polish/Gen Agent Trust Hub

lov-bp-polish

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is intended to process external business plan files (PDF, PPTX, and Markdown). While this creates an ingestion point for untrusted data, the skill includes explicit 'Output Contract' and 'Protect facts' instructions that mandate the separation of business facts from assumptions and forbid the fabrication of data, which serves as a safety boundary for the agent's reasoning.
  • [COMMAND_EXECUTION]: The skill executes a local script scripts/audit_bp.py to perform structural linting. This script uses standard Python libraries to parse text and calculate scores based on structural 'beats'. It operates within the provided project workspace and does not perform network operations or access sensitive system paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:55 AM
Security Audit — agent-trust-hub — lov-bp-polish