k2f-flyer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a dependency using the command
npx skills add suzheng/k2f --skill k2f. This resource is managed by the same author as the skill itself. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data, including event details, offers, and brand notes. While this is a standard requirement for its primary purpose, it creates a surface for potential indirect prompt injection if user inputs contain malicious instructions intended to influence the agent's behavior during content generation.
Audit Metadata