contexto-sotaque

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that involves processing external data sources, specifically YouTube links and .mp4 video files, creating a potential surface for indirect prompt injection attacks.
  • Ingestion points: External media content provided by users for phonetic dissection as specified in SKILL.md.
  • Boundary markers: Partially present; the instructions in SKILL.md direct the agent to restrict its focus to phonetic analysis and ignore other metadata (lighting, posture), but there is no explicit instruction to disregard or identify adversarial commands spoken within the audio.
  • Capability inventory: The skill frontmatter does not request access to high-risk tools (e.g., shell execution, file system writes), limiting the potential impact of an injection.
  • Sanitization: Absent; no methods are defined to sanitize or validate the content extracted from the media before processing.
  • [EXTERNAL_DOWNLOADS]: The file references/ref.md contains several references to external educational and reference websites (e.g., Wikipedia, Toda Matéria, Fonologia.org, Português.com.br). These links are used for academic reference purposes related to phonetics and linguistics and do not involve the download or execution of scripts or binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 06:24 PM
Security Audit — agent-trust-hub — contexto-sotaque