readme-writer

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Ruby scripts to perform text analysis. The scripts scripts/flesch_kincaid.rb and scripts/vocabulary_profiler.rb are used to calculate readability scores and vocabulary coverage. These scripts process data from standard input and do not perform network or privileged operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided prose, representing an attack surface for indirect prompt injection. 1. Ingestion points: Text is read from files or heredocs using the cat command and piped into analysis scripts. 2. Boundary markers: No explicit delimiters are used in the command-line examples. 3. Capability inventory: The skill's scripts only have the capability to output statistical text metrics (syllable counts, word percentages) and do not interpret the content as commands. 4. Sanitization: Not applicable, as the analysis is purely statistical.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:11 PM