output-formatter
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and format data originating from other AI agents, which creates a potential surface for indirect prompt injection if the source agents are compromised.
- Ingestion points: The skill ingests 'Agent output results' (智能体输出结果) as its primary input, as documented in
SKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or guardrails to help the agent distinguish between data to be formatted and potential instructions embedded within that data.
- Capability inventory: The skill's functionality is strictly limited to text transformation and formatting. It does not utilize tools for network communication, file system access, or shell command execution.
- Sanitization: There are no specific instructions for sanitizing or filtering the ingested content before processing.
Audit Metadata