ko-tech-writer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executeripgrep(rg) andsedfor identifying linguistic patterns, such as translationese or improper punctuation, in markdown files. It also executes internal scripts likescripts/test_ko_tech_writer_lanes.shto calibrate its analysis engine. These operations are scoped to the skill's primary function as a documentation auditor.- [EXTERNAL_DOWNLOADS]: TheWebFetchtool is utilized to retrieve technical blog samples from external URLs provided by the user. This data is used to calibrate the agent's tone and style to match the target publication venue.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from user-provided documents and external websites, creating an indirect prompt injection surface. Ingestion points: Technical blog samples (viaWebFetch) and user-provided markdown files (viaRead). Boundary markers: None are explicitly defined in the skill instructions. Capability inventory: Access toBash,Edit,Write,WebFetch, andReadtools. Sanitization: No specific sanitization of external text is mentioned before processing.
Audit Metadata