slack-message-formatter
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to execute the pbcopy command to transfer formatted text to the system clipboard.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8) by processing untrusted data (user messages) and passing it to a shell command.
- Ingestion points: User messages provided during the formatting workflow (SKILL.md).
- Boundary markers: None identified; the skill does not use delimiters or instructions to ignore embedded commands within the user content.
- Capability inventory: Use of the pbcopy system utility for data output.
- Sanitization: No evidence of input validation or escaping for the user-supplied content before it is processed.
Audit Metadata