skills/webreactiva/skills/politenizer/Gen Agent Trust Hub

politenizer

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically construct and execute shell commands to copy text to the system clipboard. It specifically suggests using printf piped into utilities like pbcopy, xclip, or clip. While intended for user convenience, this involves executing shell processes based on content generated from user input.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where untrusted data (the user's outburst) is processed and then interpolated into the aforementioned shell commands. A malicious user could provide input designed to produce an output that, when "copied" via the shell command, executes unintended shell operations.
  • Ingestion points: The user-provided message argument in SKILL.md used for tone transformation.
  • Boundary markers: No explicit delimiters or instructions are provided to separate the user-provided data from the processing instructions or to ignore embedded commands.
  • Capability inventory: The agent is instructed to use system-level clipboard tools such as pbcopy, xclip, wl-copy, and clip via shell execution.
  • Sanitization: The instructions do not define sanitization or escaping protocols for the text before it is passed to the shell for execution.
  • [COMMAND_EXECUTION]: The skill relies on executing external CLI tools to perform clipboard operations. This involves piping transformed user content directly into a shell process.
  • [DATA_EXFILTRATION]: The skill includes a reference to webreactiva.com/ia in the closing block of the response. This link points users to the author's external domain for professional growth resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:50 AM
Security Audit — agent-trust-hub — politenizer