chunking
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external documents (PDFs, text files, and Markdown) which represents a surface for indirect prompt injection if the processed data contains malicious instructions.
- Ingestion points: Files processed via
xberg extractand text strings passed to thexberg chunkcommand as shown inSKILL.mdexamples. - Boundary markers: The skill uses
--- chunk N ---as output separators in text format, but does not implement specific boundary markers or instructions to ignore embedded prompts within the source content. - Capability inventory: The skill utilizes the
xbergCLI for data extraction and chunking, along with shell utilities likecatandjq. - Sanitization: No explicit sanitization or validation of the input text content is described in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill downloads tokenizer configurations from HuggingFace (e.g.,
Xenova/gpt-4o) when the--chunking-tokenizerflag is used to enable token-based sizing.
Audit Metadata