style-guide
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted user data and has file-writing capabilities.
- Ingestion points: The skill reads user-provided text from files or conversation context using tools like Read, Grep, and Glob.
- Boundary markers: There are no explicit instructions or delimiters to isolate user-provided text from the agent's instructions, nor are there warnings to ignore potential instructions embedded within the user data.
- Capability inventory: The skill possesses extensive file system access via Read, Write, Edit, Grep, and Glob tools, as well as the ability to interact with the user via AskUserQuestion.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the user-provided text before it is processed by the agent.
Audit Metadata