content-multiplier
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or unauthorized network operations were detected. The skill's logic is implemented through a local Python script for text processing.
- [DATA_EXPOSURE]: The script
scripts/multiplier.pyreads content from a file path provided via the--inputargument. While intended for processing content, it can read any local file specified by the user or agent. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input text from files, which presents an attack surface for indirect prompt injection. 1. Ingestion points:
scripts/multiplier.pyreads data from a user-specified file path. 2. Boundary markers: No explicit delimiters or instructions are used to separate source content from the agent's operating instructions. 3. Capability inventory: The Python script performs local file system reads and writes. 4. Sanitization: No specific input sanitization or safety validation is performed on the source text content.
Audit Metadata