zero-to-hero
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied
<topic>and--contextwhich are then used to generate a markdown document. This is a standard indirect prompt injection surface for content generation tasks. - Ingestion points: The
<topic>and--contextparameters defined in theSKILL.mdusage section. - Boundary markers: Absent; the skill instructions do not specify the use of delimiters or 'ignore' instructions for the user-provided content.
- Capability inventory: The skill uses the
Writetool to save the generated markdown files to the local file system. - Sanitization: Absent; there is no mention of sanitizing or escaping the user input before it is processed by the agent.
Audit Metadata