youtube-description
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from transcripts and notes which could contain malicious instructions designed to manipulate the agent's output description. \n
- Ingestion points: User-provided transcript, notes, and chapter lists defined in the SKILL.md argument hint. \n
- Boundary markers: The skill does not provide explicit delimiters or instructions to the agent to disregard potential commands embedded within the transcript text. \n
- Capability inventory: The skill is restricted to text generation; it has no access to the file system, network, or shell command execution. \n
- Sanitization: No input sanitization or validation routines are specified for the transcript or notes data.
Audit Metadata