slopclean
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and modify user-provided artifacts (prose, code, and test suites), creating a surface where malicious instructions could be embedded in the data being processed. 1. Ingestion points: External files targeted for cleanup (e.g., README.md, test files). 2. Boundary markers: The instructions do not define specific delimiters or warnings to isolate processed data from agent instructions. 3. Capability inventory: The skill focuses on in-place file modification; no network or shell execution tools are explicitly invoked in the skill instructions. 4. Sanitization: No specific validation or sanitization logic is provided to handle untrusted input content.
- [SAFE]: The primary logic defined in the reference files and skill body is restricted to stylistic cleanup and test suite optimization. No hardcoded credentials, sensitive file access, or persistence mechanisms were detected.
Audit Metadata