chapter-structure-refactor
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze entire chapters of user-supplied academic text. The instructions lack a mandatory evidence chain for security: there are no specified boundary markers (e.g., XML tags) to isolate user content, no explicit instructions for the agent to ignore embedded commands within the text, and no mention of sanitization techniques. While the skill's capabilities are limited to text processing, this architecture presents a surface for indirect prompt injection.
- [NO_CODE]: The skill consists entirely of Markdown documentation and natural language instructions. It does not include any Python or Node.js scripts, binary executables, or shell commands that interact with the system environment.
Audit Metadata