clean-slop
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data via the
$ARGUMENTSplaceholder, which is passed to the slop-cleaner agent. This creates a vulnerability surface where malicious instructions embedded in the target data could potentially influence the agent's behavior. - Ingestion points:
SKILL.md(via the$ARGUMENTSvariable). - Boundary markers: Absent; the skill does not use delimiters or provide instructions to ignore prompts within the processed content.
- Capability inventory:
SKILL.mdidentifies the use of aslop-cleaner agentintended to modify or remove content, implying file write or edit capabilities. - Sanitization: Absent; no validation, escaping, or filtering of the input data is performed.
- [NO_CODE]: The skill contains no scripts or binary executables, consisting entirely of markdown instructions and metadata.
Audit Metadata