writing-shape
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process "raw material" from external markdown files, which presents a surface for indirect prompt injection where instructions embedded in the source text could attempt to influence the agent's behavior during the shaping session.
- Ingestion points: The skill reads an input markdown file provided by the user as the "pile" of raw material (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or provide warnings to the agent to ignore instructions found within the input content.
- Capability inventory: The skill has the capability to read from the local file system and write/append to article documents (SKILL.md).
- Sanitization: No sanitization, validation, or filtering of the input content is described before it is processed and incorporated into the output article.
Audit Metadata