ip-evaluator
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external IP data, including summaries and online performance metrics, which could potentially contain malicious instructions or biased content. However, the risk is mitigated by the lack of tool access or execution capabilities.
- Ingestion points: User-provided text, novel summaries, and external market data discussed in SKILL.md.
- Boundary markers: The skill does not define specific delimiters to isolate external text from instructions.
- Capability inventory: No tools, shell commands, or network operations are requested in the configuration or instructions.
- Sanitization: No explicit validation or filtering logic is specified for the input data.
- [NO_CODE]: No executable scripts, binaries, or automated processes were detected within the skill files. The functionality is purely driven by natural language instructions and examples.
Audit Metadata