creator-deal-decoder
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data in the form of contract text provided by the user.
- Ingestion points: The skill instructs the agent to ask for and analyze contract text pasted by the user in
SKILL.md. - Boundary markers: There are no specific delimiters or instructions to treat the ingested text as data rather than instructions.
- Capability inventory: The skill does not use any tools or perform network, file, or command execution operations.
- Sanitization: No input sanitization or validation is implemented.
- [SAFE]: The skill consists entirely of natural language instructions and does not contain any executable scripts, obfuscated content, or persistence mechanisms.
- [SAFE]: The skill frontmatter does not request access to any tools, ensuring the agent operates within a restricted environment.
Audit Metadata