humanizer-ar-msa
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and rewrite user-supplied Arabic text using the agent's editing tools. This creates a potential surface for indirect prompt injection if the input text contains malicious instructions intended to manipulate the agent's behavior.
- Ingestion points: The skill is designed to process arbitrary text input provided by users via the
ReadandEdittools. - Boundary markers: The instructions do not define specific delimiters (such as XML tags or boundary strings) to separate untrusted user data from the agent's internal instructions.
- Capability inventory: The skill has access to
Read,Write,Edit, andAskUserQuestiontools, allowing it to modify files based on the content it processes. - Sanitization: No explicit logic or instructions are provided to sanitize, filter, or validate the input text for embedded prompt injection attempts.
Audit Metadata