document-factory
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of documents by ingesting external data (Context, Problem, Proposal) to fill templates.
- Ingestion points: The "Gather Inputs" phase in
SKILL.mdidentifies where untrusted data enters the agent context. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from interpreting instructions embedded within the provided inputs.
- Capability inventory: The skill utilizes the
Read,Grep,Glob, andWritetools. - Sanitization: No sanitization or escaping mechanisms are implemented for the external content before it is processed.
Audit Metadata