content-writer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill researches and reads content from external files (.md, .txt, .html) specified in a local configuration file. If these files contain malicious instructions, they could influence the agent's behavior during the drafting and execution phases.
- Ingestion points: Files located at paths retrieved from ~/.superskills/knowledge.conf.
- Boundary markers: The instructions do not define delimiters or warnings to ignore instructions within the knowledge base content.
- Capability inventory: The skill has access to Read, Write, Bash, Grep, and Glob tools.
- Sanitization: There is no evidence of sanitization, validation, or escaping of the content read from the files before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a loop that parses a configuration file using awk and performs recursive searches using grep. This allows the agent to programmatically discover and read files on the local filesystem based on user-provided paths.
Audit Metadata