lov-style-clone
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user-supplied articles without explicit boundary markers or sanitization, creating a surface for indirect prompt injection. A malicious sample article could contain instructions that influence the agent's behavior during the analysis or writing phase.
- Ingestion points: User-provided sample articles and target articles in
SKILL.md(Step 1). - Boundary markers: Absent. No specific delimiters or warnings are used to tell the agent to ignore instructions within the processed text.
- Capability inventory: The skill uses the
Writetool to save markdown files to the./output/style-profiles/directory. - Sanitization: No sanitization, escaping, or validation of the input article content is mentioned.
Audit Metadata