humanize-content
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python utility
scripts/lint_style.pyto analyze text drafts. This script only reads local files provided as arguments and uses Python's standard library for regular expression matching, with no network or write capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process and rewrite untrusted user-provided drafts, which creates a surface for indirect prompt injection. * Ingestion points: The skill ingests user content from
.md,.html, and.txtfiles. * Boundary markers: No specific delimiters or 'ignore' instructions are mandated when the agent reads the draft content. * Capability inventory: The skill possesses the ability to execute local scripts and perform complex text generation/rewriting. * Sanitization: Thelint_style.pyscript performs basic preprocessing (stripping code blocks and frontmatter) for its own analysis but does not sanitize the content passed back to the agent for rewriting.
Audit Metadata