vp-tldr
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill functions by processing untrusted external text, which exposes a surface for indirect prompt injection.
- Ingestion points: The skill ingests 'artifacts, messages, or updates' as defined in SKILL.md for processing.
- Boundary markers: The skill contains instructions for faithful representation but lacks explicit markers or instructions to ignore commands potentially embedded within the source text.
- Capability inventory: There are no tools, subprocess calls, network operations, or file-system writes defined in the skill files.
- Sanitization: No input sanitization, validation logic, or filtering is specified for the ingested content.
- [NO_CODE]: The skill is composed exclusively of documentation and configuration files (Markdown and YAML) and contains no executable scripts or binaries.
Audit Metadata