write-skill
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user-provided text, creating a surface for potential indirect prompt injection.
- Ingestion points: The skill ingests text from users or via the Read tool, as shown in the file-processing examples in SKILL.md.
- Boundary markers: There are no instructions for the agent to use delimiters or boundary markers to isolate user input from the skill's operational logic.
- Capability inventory: The skill is configured with Read, Write, and Edit tools, allowing it to modify files on the system.
- Sanitization: The skill does not provide instructions to sanitize or validate the content of the ingested text before it is processed by the agent.
Audit Metadata