skill-standardization

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill is dedicated to ensuring documentation compliance through local file parsing.
  • [PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection as it processes untrusted local files (SKILL.md) for validation purposes.
  • Ingestion points: The scripts/validate_skill.sh script reads SKILL.md files from user-specified directories.
  • Boundary markers: The skill does not implement specific boundary markers or 'ignore' instructions for the content of the files being audited.
  • Capability inventory: The skill utilizes file system access tools (Bash, Read, Write, Edit, Glob, Grep) to perform validation. The bash script uses standard utilities like grep, sed, and awk for text extraction.
  • Sanitization: The script extracts specific metadata fields for validation and does not execute the ingested content as code or interpolate it into high-privilege prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 02:01 PM