content-analyzer
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (e.g.,
scripts/content/analyze_transcript.py,scripts/content/extract_themes.py) and shell utilities likefindandlsto process data. These operations are restricted to the local environment and used for intended analysis purposes. - [DATA_EXPOSURE_AND_EXFILTRATION]: Data access is scoped to the
references/andoutput/directories. No network-enabled tools (e.g., curl, wget) are requested inallowed-tools, and no external communication patterns were identified in the instructions. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a processing engine for untrusted external data (transcripts and documents), creating a potential surface for indirect injection.
- Ingestion points: Reference files in
references/transcripts/,references/examples/, andreferences/competitors/. - Boundary markers: None explicitly defined in the provided markdown instructions.
- Capability inventory: The agent has access to
Bash,Read,Write, and the ability to execute the skill's Python scripts. - Sanitization: No specific input sanitization or filtering logic is described in the prompt structure.
Audit Metadata