Remove AI Writing Fingerprints from Draft Copy
Warn
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone code from a personal GitHub repository (
https://github.com/brandonwise/humanizer.git). This source is not a verified organization or well-known service. - [COMMAND_EXECUTION]: The installation instructions include running
npm installandnpm install -g .on the cloned source code. This process can automatically execute arbitrary shell scripts defined in the repository'spackage.json(such as preinstall or postinstall hooks). - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external text files (
node src/cli.js analyze -f your-draft.md). This creates a vulnerability surface where instructions embedded within the processed draft could attempt to influence the agent's behavior. - Ingestion points:
your-draft.mdvia the CLI tool (SKILL.md). - Boundary markers: No specific delimiters or warnings to ignore instructions within the draft content are provided.
- Capability inventory: The skill uses
npm installfor setup and executes a Node.js CLI tool (node src/cli.js) to process data. - Sanitization: No evidence of sanitization or filtering for the input draft content.
Audit Metadata