rubber-duck-plus
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions for the AI agent's conversational behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input during the 'talk through' sessions.
- Ingestion points: User chat turns (Step 2 and Step 3).
- Boundary markers: None.
- Capability inventory: The skill does not use any tools, file system writes (beyond the memory file), or network access.
- Sanitization: No explicit sanitization or filtering is applied to user input.
- Risk assessment: Given the lack of executable capabilities, the risk of exploitation is negligible.
Audit Metadata