bypass-turnitin
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
@rephrasy/mcppackage, which is a Node.js package provided by the vendor for structural humanization of AI text. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied drafts, creating an ingestion point for untrusted data that could contain malicious instructions.
- Ingestion points: User-provided text drafts and writing samples intended for humanization.
- Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore embedded prompts within the processed text.
- Capability inventory: The skill uses text transformation logic and makes external tool calls to the humanize function in the
@rephrasy/mcppackage. - Sanitization: No documented sanitization or input filtering is performed on the user text before humanization.
Audit Metadata