writing-fragments
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection because it is instructed to re-read the target markdown file from disk before every write operation to preserve user-made changes. This ingestion of external data could allow malicious instructions within the file to influence agent behavior.
- Ingestion points: Target markdown file at a path provided by the user (referenced in SKILL.md).
- Boundary markers: The skill does not specify any delimiters or safety markers when reading the file's content.
- Capability inventory: The skill performs file system read and write/append operations.
- Sanitization: There is no evidence of sanitization, escaping, or validation of the content read from the file before it is processed by the agent.
Audit Metadata