prompt-writing
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a workflow for diagnosing and fixing prompts based on call transcripts provided by users. This creates a surface where malicious instructions embedded in a transcript could potentially influence the agent's prompt-generation logic.
- Ingestion points: User-provided call transcripts processed via the workflow described in 'references/transcript-workflow.md'.
- Boundary markers: The skill lacks explicit instructions for the agent to treat transcript content as untrusted data or use specific delimiters to isolate it from its own operating instructions.
- Capability inventory: The agent's capabilities are limited to generating structured text prompts (Markdown, YAML, JSON). It does not have access to shell execution, file-system writes, or network operations.
- Sanitization: No sanitization or filtering logic is specified for the transcript content before analysis.
Audit Metadata