lovstudio-style-clone
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow that ingests and processes untrusted user data (sample articles) to extract style profiles, creating a surface for indirect prompt injection.
- Ingestion points: Articles provided by the user are analyzed in Step 2 (SKILL.md).
- Boundary markers: The instructions do not define clear delimiters or include 'ignore embedded instructions' directives for the sample content.
- Capability inventory: The agent has the capability to write the resulting profiles to the local file system at
./output/style-profiles/(SKILL.md). - Sanitization: There is no evidence of sanitization or filtering applied to the input articles before processing.
Audit Metadata