small-script-generator
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied data to generate automation scripts, creating an attack surface for indirect prompt injection.
- Ingestion points: User input for file paths, inputs, and outputs defined in SKILL.md.
- Boundary markers: The skill does not specify delimiters or instructions to ignore embedded commands within user-provided data.
- Capability inventory: The skill only generates script snippets and does not have access to network tools, file writing capabilities, or code execution environments.
- Sanitization: There are no explicit instructions for validating, filtering, or escaping the user-provided parameters.
Audit Metadata