oc-hook-finder
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from
transcript.jsonandanalysis.jsonfiles. These files represent an attack surface where instructions embedded in the media text could attempt to override the agent's behavior. - Ingestion points: The agent is instructed to read content from
<PROJECT>/transcript.jsonand<PROJECT>/analysis.json(SKILL.md). - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the transcript data.
- Capability inventory: The skill is granted access to the
BashandReadtools, which provides a high-impact execution environment if an injection is successful. - Sanitization: The instructions do not mention any validation or filtering of the content read from the transcript files.
Audit Metadata