writing-beats
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability to indirect prompt injection due to the way it handles external data.\n
- Ingestion points: The skill is designed to process a markdown file of "raw material" provided by the user.\n
- Boundary markers: There are no explicit instructions to use delimiters or to treat the "raw material" as data only, increasing the risk that instructions embedded in the raw material could be interpreted as agent commands.\n
- Capability inventory: The agent is instructed to perform file system operations, specifically writing "beats" to a file and reading the article content back from disk.\n
- Sanitization: The skill lacks logic to sanitize or validate the input data before it is processed or written to the local file system.
Audit Metadata