hook-generator
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based instructions and logic for text generation. It does not reference or include any scripts, shell commands, or external dependencies.- [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection as it ingests content from an external source (the 'spine'). However, the risk is neutralized by the complete absence of functional capabilities that could be misused by an attacker.
- Ingestion points: Workflow Step 1 in SKILL.md.
- Boundary markers: None present to delimit the 'spine' data.
- Capability inventory: None; the skill does not utilize any tools or perform network/file system operations.
- Sanitization: No sanitization of the input content is specified.
Audit Metadata