k2f-application-form
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a core design library using the command 'npx skills add suzheng/k2f'. This is a necessary functional dependency provided by the author.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as job postings and resumes to populate application forms. 1. Ingestion points: The skill ingests user briefs, templates, and job postings in the generation phase. 2. Boundary markers: The agent is instructed to use 'NEEDS USER INPUT' markers for missing legal or compliance content. 3. Capability inventory: The skill performs file creation for blueprints and utilizes the k2f packaging tool. 4. Sanitization: Explicit rules prevent the agent from inventing eligibility rules, legal clauses, or metrics not present in the input.
Audit Metadata