writing-beats
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied markdown files ('raw material') to generate content. This ingestion of untrusted data represents a vulnerability surface where malicious instructions embedded in the source material could potentially influence agent behavior.
- Ingestion points: User-provided markdown files containing raw material are read by the agent (SKILL.md).
- Boundary markers: The prompt instructions do not specify any delimiters or safety markers to isolate the raw material from the skill's instructions.
- Capability inventory: The agent has capabilities to read from and write to the local filesystem (SKILL.md).
- Sanitization: No sanitization or validation of the input markdown content is performed before processing.
Audit Metadata