nlp-advanced
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [NO_CODE] (SAFE): The skill consists entirely of markdown documentation and reference files. There are no executable scripts (.py, .js, .sh), binaries, or configuration files that could be leveraged for malicious actions.
- [PROMPT_INJECTION] (SAFE): The instructions in SKILL.md are limited to directing the agent to consult specific reference files (patterns.md, sharp_edges.md, validations.md). There are no attempts to bypass safety filters, extract system prompts, or override agent constraints.
- [EXTERNAL_DOWNLOADS] (SAFE): No remote scripts or packages are downloaded or executed. While the documentation mentions common NLP libraries like SpaCy and Transformers, it does not attempt to install or run them.
- [DATA_EXFILTRATION] (SAFE): There are no file system access operations, network requests, or hardcoded credentials detected in the provided files.
- [INDIRECT_PROMPT_INJECTION] (SAFE): The skill provides static reference material and does not ingest or process untrusted external data, eliminating the surface for indirect injection attacks.
Audit Metadata