text-condenser
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3to execute a local utility scriptskills/shared/scripts/wordcount.py. This script is invoked to perform precise character counting and to validate if the condensed text meets the requested target length constraints. This is a controlled internal operation within the skill environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to generate summaries, which creates a surface for indirect prompt injection. 1. Ingestion points: Untrusted text enters the agent context via the
textparameter inSKILL.md. 2. Boundary markers: The instructions do not define specific delimiters or boundary markers to isolate the user-provided text from the skill's system instructions. 3. Capability inventory: The skill possesses the capability to execute local validation scripts and write summarized text to theoutputs/directory. 4. Sanitization: No input sanitization, filtering, or instruction detection is described in the skill workflow. - [EXTERNAL_DOWNLOADS]: The
EASEL-META.mdfile contains several references to public GitHub repositories (e.g.,praj2408/Text-Summarizer-Project). These links are provided for documentation and technical attribution purposes only; the skill does not attempt to download, install, or execute code from these external sources during operation.
Audit Metadata