evidence-lock
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill file contains only markdown instructions and YAML metadata. There are no scripts, binaries, or command-line instructions provided.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external user-provided documents ('sources'). While this represents an attack surface for indirect prompt injection, the skill does not possess high-privilege capabilities such as network access, file system writes, or shell execution, limiting the potential impact to the generated text output.
- Ingestion points: User-provided source documents (SKILL.md).
- Boundary markers: None defined.
- Capability inventory: Text generation and formatting.
- Sanitization: None defined.
Audit Metadata