better-writing
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and review untrusted user-facing text (e.g., button labels, error messages) from external source code or files. This creates a potential surface where malicious instructions could be embedded in the data being reviewed to influence the agent's behavior.
- Ingestion points: The skill processes interface copy and product microcopy provided by the user or found in the codebase (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the external content.
- Capability inventory: The skill itself does not define or use any dangerous capabilities like network operations, file writing, or shell command execution, though it operates in an environment where the agent platform may provide such tools.
- Sanitization: The instructions do not include steps to sanitize or validate the content being reviewed before processing.
Audit Metadata