editorial-context
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill reads and merges content from external markdown files, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The instructions direct the agent to read
PROJECT.mdand.agents/editorial-context.md(SKILL.md).\n - Boundary markers: There are no specific delimiters or instructions provided to the agent to ignore or isolate potentially malicious commands embedded within the ingested files.\n
- Capability inventory: The skill provides the agent with the ability to read and write files within the project directory.\n
- Sanitization: No sanitization, filtering, or validation is performed on the data retrieved from project files before it is processed or stored.
Audit Metadata