k2f-event-program
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install a dependency using the command
npx skills add suzheng/k2f. This refers to a skill provided by the same author and is a standard part of the platform's workflow. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data such as user-provided schedules and sponsor lists. It includes specific mitigation steps, such as a "Publish boundary" to classify and filter sensitive information (e.g., invitation-only lists) and a "Cut pass" to remove unnecessary or potentially risky metadata like full CVs or slide URLs.
Audit Metadata