writing-shape

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to help an agent shape raw markdown material into a structured article. It involves standard file reading and appending operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content, which acts as a data ingestion surface. While malicious text in the input could attempt to influence the agent, the risk is mitigated by the skill's lack of network access and the 'disable-model-invocation' constraint. (1) Ingestion points: User-provided markdown file ('the pile'). (2) Boundary markers: Absent. (3) Capability inventory: File read and append tools only. (4) Sanitization: None described.
  • [COMMAND_EXECUTION]: The skill manages files using local file system tools for reading and appending. It does not perform arbitrary shell command execution, persistence, or privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 09:17 AM
Security Audit — agent-trust-hub — writing-shape