content-pillar-atomizer
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
web_fetchtool to retrieve content from external URLs provided in thepillar_contentfield. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external articles and blog posts.
- Ingestion points: External content retrieved via URLs or direct text input provided to the
pillar_contentparameter inSKILL.md. - Boundary markers: No explicit delimiters or boundary markers (e.g., XML tags or specific 'ignore' instructions) are defined in the workflow to separate external content from the agent's instructions.
- Capability inventory: The agent has access to
web_fetchfor content retrieval andweb_searchfor topic analysis. - Sanitization: There is no evidence of content sanitization, filtering, or validation performed on the fetched data before it is processed by the AI.
Audit Metadata