readme-writer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Ruby scripts to perform text analysis. The scripts
scripts/flesch_kincaid.rbandscripts/vocabulary_profiler.rbare used to calculate readability scores and vocabulary coverage. These scripts process data from standard input and do not perform network or privileged operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided prose, representing an attack surface for indirect prompt injection. 1. Ingestion points: Text is read from files or heredocs using the
catcommand and piped into analysis scripts. 2. Boundary markers: No explicit delimiters are used in the command-line examples. 3. Capability inventory: The skill's scripts only have the capability to output statistical text metrics (syllable counts, word percentages) and do not interpret the content as commands. 4. Sanitization: Not applicable, as the analysis is purely statistical.
Audit Metadata