claude-prompt-writer
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content from
build-notes.mdandclaude-prompts.mdto generate new instructions. While this creates a potential ingestion point for untrusted data, the skill is designed specifically to translate these notes into structured templates, and no exploitable capabilities or dangerous interpolations were found. - Ingestion points: Reads from
workspace/playground/<build>/build-notes.mdandworkspace/playground/<build>/claude-prompts.md. - Boundary markers: The skill does not use specific delimiters for external content but operates within a highly structured template format.
- Capability inventory: Limited to
ReadandWritetools within the workspace playground directory. - Sanitization: The skill relies on structured output patterns defined in
references/prompt-patterns.mdto bound the generated content. - [EXTERNAL_DOWNLOADS]: The skill references an external resource for the Tone.js library in its generated prompts.
- Evidence: The prompt templates in
references/prompt-patterns.mdinstruct the user to loadhttps://unpkg.com/tone@15.5/build/Tone.js. - Source: The resource is hosted on
unpkg.com, which is a well-known and established CDN for NPM packages.
Audit Metadata