word-flow
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a structured orchestration of internal tools (
wordandcard) to process user-specified English words. - [SAFE]: File system activity is limited to generating PNG files in the
~/Downloads/directory, which is appropriate for the skill's stated purpose of creating visual vocabulary cards. - [SAFE]: There are no indicators of external network communication, hardcoded credentials, or attempts to access sensitive system files.
- [PROMPT_INJECTION]: The skill processes user-provided vocabulary and pipes tool outputs, forming an indirect prompt injection surface.
- [PROMPT_INJECTION]: Ingestion points: User-provided English words provided as arguments to the
/word-flowcommand. - [PROMPT_INJECTION]: Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded prompts within the word tokens or tool outputs.
- [PROMPT_INJECTION]: Capability inventory: The skill calls the
wordandcardtools and has the capability to write image files to the local Downloads folder. - [PROMPT_INJECTION]: Sanitization: The skill relies on the platform's default handling of tool arguments and output piping for safety.
Audit Metadata