prose-editing
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes a bundled Python script (
scripts/lint.py) for prose analysis. This script is self-contained, uses only Python standard library modules (e.g., re, json, hashlib), and performs no network operations or external downloads. - [SAFE]: The instructions in
SKILL.mdspecifically direct the AI agent to use the system's temporary directory API and mandate strict quoting of all paths in shell commands to mitigate the risk of command injection or path traversal when handling user-provided files. - [SAFE]: The analysis logic in
scripts/lint.pyuses regular expression matching to detect stylistic patterns. It does not utilize dynamic execution functions likeeval()orexec()on the content being analyzed, preventing code injection via processed prose. - [SAFE]: No hardcoded credentials, sensitive file access (e.g., SSH keys, AWS configs), or data exfiltration mechanisms were found in the skill's instructions or scripts.
- [SAFE]: The skill does not employ obfuscation techniques; all scripts and reference files are provided in plain text and are clearly documented.
Audit Metadata