script-writer
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as
build-notes.mdandtakes_packed.mdto inform narration scripts. It lacks explicit boundary markers or sanitization logic to differentiate between legitimate data and potentially malicious instructions embedded within these files.\n- Ingestion points: Readsworkspace/video-projects/<slug>/takes_packed.mdandbuild-notes.mdin SKILL.md.\n- Boundary markers: No delimiters or 'ignore instructions' warnings are present in the processing logic.\n- Capability inventory: The skill usesReadandWritetools for file system operations as defined in SKILL.md.\n- Sanitization: There is no evidence of input validation or instruction filtering for the ingested content.
Audit Metadata