skills/zju-real/easel/style-transfer/Gen Agent Trust Hub

style-transfer

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text provided by the user in the text and style_reference fields, which serves as a potential surface for indirect prompt injection attacks.
  • Ingestion points: External data is processed via the text and style_reference inputs in SKILL.md.
  • Boundary markers: There are no explicit instructions to the agent to treat input text as data only or to ignore embedded instructions (delimiters are absent).
  • Capability inventory: The skill uses the file system to write results into the outputs/ directory.
  • Sanitization: The instructions do not define any sanitization, filtering, or validation steps for the processed input content.
  • [EXTERNAL_DOWNLOADS]: The EASEL-META.md file contains several URLs to public GitHub repositories used for academic reference and research attribution.
  • References: The skill documents links to github.com/comp-int-hum/llm-style-transfer, github.com/fuzhenxin/Style-Transfer-in-Text, and github.com/souro/tst_llm as foundational sources for its logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 01:21 PM