red-pen
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional text for an AI persona. There are no scripts, binaries, or configuration files that would result in command execution or system modification.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided prose, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: User-supplied text provided in the chat context (SKILL.md).
- Boundary markers: Absent; the skill does not define specific delimiters for separating user input from instructions.
- Capability inventory: None; the skill does not request or use any tools, network access, or file system permissions.
- Sanitization: Absent. Given the total lack of capabilities (no network, no file writes, no tool usage), this surface poses no risk to the environment or data.
Audit Metadata