content-pillar-atomizer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via the
pillar_contentinput, which can be provided as raw text or retrieved from a URL. - Ingestion points:
pillar_contentfield inSKILL.md. - Boundary markers: Absent. The instructions do not define delimiters or specific 'ignore embedded instructions' prompts for the input text.
- Capability inventory: The skill utilizes
web_fetch(file/network access) andweb_search(network access). - Sanitization: None. There is no evidence of input validation or escaping for the processed content.
- [EXTERNAL_DOWNLOADS]: The skill employs
web_fetchto retrieve content from remote URLs provided by the user andweb_searchto query for topic engagement data. These network operations target user-specified or search-driven external domains.
Audit Metadata