public-writing
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
scripts/check-prose.shthat utilizes standard Unix utilities likeawk,grep, andsedto search for specific linguistic patterns in text files. It also provides a Python one-liner inSKILL.mdfor analyzing sentence length. - [DYNAMIC_EXECUTION]: The skill provides a Python snippet intended to be run by the user or agent to calculate text statistics. This is a local script provided as part of the skill documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied prose drafts, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Untrusted prose drafts are processed via the
FILEargument in the Python one-liner (inSKILL.md) and thescripts/check-prose.shscript. - Boundary markers: Absent. The instructions do not define delimiters or treat the input file content as potentially untrusted data.
- Capability inventory: Local command execution using
bash,awk, andgrep(inscripts/check-prose.sh), and Python execution (inSKILL.md). - Sanitization: Absent. The analysis tools operate directly on the input text using regular expressions without prior sanitization.
Audit Metadata