converting-email-templates
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/converter.pyto process template files. This is a primary function of the skill and operates on local files provided by the user. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverified dependencies were detected. The skill uses standard Python libraries for regex-based text processing.
- [DATA_EXFILTRATION]: The skill operates entirely locally on template files. No network operations or external data transmissions are present in the provided scripts.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override agent behavior or bypass safety guidelines. It uses instructional language to guide the template conversion process.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external template data, it includes specific security practices such as wrapping unsupported syntax in HTML comments (
<!-- FLAGGED ... -->) and prepending warnings to prevent the resulting code from being accidentally executed or causing errors in the target platform's editor.
Audit Metadata