writing-beats
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests raw markdown material provided by the user, which establishes a potential surface for indirect prompt injection if those materials contain malicious instructions designed to influence the agent.
- Ingestion points: External markdown files containing raw source materials as described in
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or clear directives to treat the ingested material strictly as data.
- Capability inventory: The skill utilizes local file system read and write capabilities to manage the writing process.
- Sanitization: No explicit sanitization, filtering, or validation of the input content is mentioned in the instructions.
Audit Metadata