how-to-tutorial-writer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and configuration metadata. There are no scripts, binaries, or system-level commands included.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it processes untrusted user input and web search results. 1. Ingestion points: 'task' and 'product' input fields and 'web_search' results (SKILL.md). 2. Boundary markers: No explicit delimiters or boundary markers are defined for external data. 3. Capability inventory: Includes the 'web_search' tool; lacks file-writing, network exfiltration, or command execution capabilities. 4. Sanitization: No input validation or content sanitization processes are specified.
Audit Metadata