lens-eli5
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a pure prompt-based tool designed for generating technical analogies. It contains no executable scripts, binary files, or external dependencies.
- [SAFE]: Security is maintained through the
disable-model-invocation: trueflag and explicit operating invariants that prevent the agent from performing system-level mutations, file creation, or command execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied technical data, creating a potential surface for indirect injection. This risk is effectively mitigated by the skill's complete lack of access to external tools, the network, or the file system.
- Ingestion points: User-provided technical content or code snippets in the conversation context (SKILL.md).
- Boundary markers: Employs a fixed response template but lacks explicit delimiters for user-provided input content.
- Capability inventory: No tool access is allowed, and the skill contains no file system writes or network operations.
- Sanitization: No input filtering or escaping is implemented.
Audit Metadata