scamper
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of conversational instructions for the AI agent. There are no associated scripts, executables, or configurations that perform system-level actions.
- [PROMPT_INJECTION]: The skill defines a surface for processing user-supplied data through the
$ARGUMENTSvariable. - Ingestion points: User input enters the agent context via the
$ARGUMENTSplaceholder inSKILL.md. - Boundary markers: The variable is enclosed in double quotes (present) which act as simple delimiters.
- Capability inventory: Analysis of all files shows zero capabilities; no subprocess calls, exec/eval, file-write, or network operations are defined.
- Sanitization: No escaping or validation of user-provided content is performed (absent).
Audit Metadata