rhyme
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script (
datamuse.sh) to query the Datamuse API for syllable counts and synonyms. This is an intended function of the skill. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto interact with the Datamuse API, which is a well-known service for linguistic data and vocabulary. This activity is restricted to a legitimate external service. - [PROMPT_INJECTION]: The skill enables project-level template overrides, allowing it to load configuration from the current project directory. This represents a surface for indirect prompt injection if a project contains untrusted markdown files.
Audit Metadata