atomize-claim
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill does not contain any executable code, scripts, or binary files. It operates solely as a set of logical instructions for text analysis.\n- [SAFE]: No network communication patterns, external URLs, or remote dependency installations were found.\n- [SAFE]: The skill does not access sensitive system locations, environment variables, or private credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input during its decomposition task.\n
- Ingestion points: The skill accepts untrusted text via parameters like
compound_claimandargument_contextdefined in SKILL.md.\n - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands in the input.\n
- Capability inventory: No dangerous capabilities, such as subprocess execution, file system modifications, or network operations, are present in the skill instructions.\n
- Sanitization: Absent; the skill does not specify filtering or escaping for input text.\n
- Given that the skill lacks any actionable capabilities for a malicious prompt to exploit, the surface area is assessed as safe.
Audit Metadata