input-output-guardrails

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a defensive tool designed to improve AI safety. It provides comprehensive patterns for input validation, output moderation, and PII redaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted user data to apply security filters.
  • Ingestion points: Untrusted input is processed via the validate and filter methods in SKILL.md and the GuardrailTester in scripts/test-guardrails.py.
  • Boundary markers: The implementation uses regular expressions and pattern matching to identify and isolate malicious content within the input stream.
  • Capability inventory: The skill is low-privilege. The scripts/test-guardrails.py script performs a local file system write to save test results to guardrails_report.json. No network exfiltration or shell execution capabilities are present.
  • Sanitization: The primary function of the skill is sanitization, utilizing redaction (e.g., replacing PII with [REDACTED]) and blocking logic for known attack patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 09:57 AM