unslop
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by scanning and rewriting user-provided text, which introduces a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill instructions require the agent to process and "Rewrite" external content based on a list of 31 stylistic patterns (SKILL.md).
- Boundary markers: The skill lacks instructions for the agent to use delimiters (such as XML tags or specific markers) to separate the untrusted input text from the agent's instructions.
- Capability inventory: Although the skill itself does not contain scripts, the underlying agent platform typically provides access to powerful tools such as shell execution and file system manipulation.
- Sanitization: There are no mechanisms described to sanitize, filter, or validate the input text to prevent it from containing hidden instructions that the agent might inadvertently execute.
Audit Metadata