humanizer-zh
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user-supplied Chinese text, which presents an attack surface for instructions embedded within that data.
- Ingestion points: The skill reads text from user input or local files using the
Readtool. - Boundary markers: The instructions explicitly define the input as "material" and strictly command the agent to ignore any embedded commands, role-play settings, or prompts.
- Capability inventory: The skill utilizes
Read,Write,Edit, andAskUserQuestionfor content modification. - Sanitization: The skill relies on strong logical boundaries defined in the prompt to prevent the agent from acting on external data as instructions.
- [EXTERNAL_DOWNLOADS]: The skill metadata and documentation reference external sources on GitHub.
- Evidence: References to
github.com/blader/humanizer,github.com/op7418/Humanizer-zh, andgithub.com/hardikpandya/stop-slopare included. - Context: These are standard references to the skill's conceptual origins and do not involve any automated runtime execution or downloading of untrusted scripts.
Audit Metadata