field-notes-editorial-template
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill functions as a template engine that interpolates external data into an HTML artifact, creating a potential surface for indirect injection if malicious input is provided.
- Ingestion points: User-supplied report content and design parameters from the
DESIGN.mdfile. - Boundary markers: The instructions do not define explicit delimiters or escaping rules for isolating user data within the template.
- Capability inventory: The skill uses the
file_writecapability to output the finalindex.htmlreport. - Sanitization: The skill relies on an internal checklist to ensure no 'sandbox-hostile' APIs (like
localStorageorwindow.open) are present in the final output.
Audit Metadata