k2f-grant-proposal
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of a core dependency using the command
npx skills add suzheng/k2f. This is a standard procedure to enable the required formatting engine, and the resource originates from the same author. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted research ideas and solicitations (SKILL.md). While it lacks explicit boundary markers or sanitization, its capabilities are restricted to semantic content structuring and aesthetic layout within the K2F engine, presenting no significant exploitation path.
Audit Metadata