skills/phuetz/code-buddy/summarize/Gen Agent Trust Hub

summarize

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its core summarization features. Ingestion points: Untrusted data enters the agent context via URL content fetched using curl or web fetch and via local files read by the agent (defined in SKILL.md). Boundary markers: Absent; the instructions do not define delimiters or provide warnings to ignore instructions embedded within the fetched content. Capability inventory: The skill utilizes curl for network operations and possesses file system read capabilities (defined in SKILL.md). Sanitization: Absent; no escaping, validation, or filtering of the external content is implemented before processing.- [EXTERNAL_DOWNLOADS]: The skill instructions explicitly direct the agent to use curl or web fetching tools to download content from external URLs to perform summarization.- [COMMAND_EXECUTION]: The skill uses the curl command-line tool to retrieve data from remote servers as part of its URL summarization workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 07:13 AM