interview-style-doc-building
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core loop involves taking user input and writing it directly to local files, creating a potential vector for indirect prompt injection.
- Ingestion points: User answers to interview questions are processed as described in the Loop section of SKILL.md.
- Boundary markers: Absent; the instructions do not specify any delimiters or safety markers to isolate user-provided text from the file structure during the patching process.
- Capability inventory: The skill requires the use of
write_fileandpatchtools to modify the local filesystem, as specified in the Hard Rules of SKILL.md. - Sanitization: Absent; there is no requirement or logic provided to sanitize, validate, or escape user input before it is written to the document.
Audit Metadata