content-calendar
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate file operations within the project scope, such as reading content strategy JSON files and writing calendar outputs in YAML and Markdown formats. These actions are consistent with its primary purpose.
- [PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection as it processes external project files to generate the content calendar.
- Ingestion points: Step 1 (Workflow) reads content-strategy.json, campaigns/*.json, and marketing-project.json and scans the content/ directory.
- Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions potentially embedded within these external files.
- Capability inventory: The skill has access to Read, Write, Edit, and Bash tools for managing project files.
- Sanitization: No sanitization or validation of the input file contents is described in the skill instructions.
Audit Metadata