use-jev
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
typesafe-sdkpackage, which is an external dependency used to interact with the classification service.\n- [DATA_EXFILTRATION]: The skill transmits data provided in thestateparameter to thetypesafe.aiAPI for classification purposes.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input through the Jev classifier, which is susceptible to adversarial content intended to influence classification results.\n - Ingestion points: The
stateparameter in theclient.system_onecall inSKILL.mdaccepts arbitrary text data.\n - Boundary markers: None defined in the skill instructions to separate untrusted data from instructions.\n
- Capability inventory: The provided example script performs no dangerous actions (it only prints results), but downstream agent actions based on these results could be affected.\n
- Sanitization: No sanitization or validation of the input text is described.
Audit Metadata