k2f-research-deck
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a core dependency via the command
npx skills add suzheng/k2f --skill k2f. This dependency belongs to the same author as the skill. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted external data such as research papers, preprints, and study notes.
- Ingestion points: External documents, papers, and experimental logs provided as input for slide generation.
- Boundary markers: The instructions do not specify explicit delimiters or warnings for the agent to ignore instructions embedded within the source materials.
- Capability inventory: The skill involves generating content blueprints and utilizing the
k2fskill for file packaging and exporting. - Sanitization: There are no documented procedures for sanitizing or escaping the content retrieved from the input documents before processing.
Audit Metadata