edit-risen-prompt
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external files to create or audit prompts, creating a surface where malicious instructions within the input data could potentially influence the agent's behavior.
- Ingestion points: The skill reads a user-provided file specified in the command arguments ($1) as part of its analysis phase in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the input file content, increasing the risk that the model might follow instructions found inside the 'messy notes'.
- Capability inventory: The skill is restricted to file system operations (Read, Write, Edit, Glob, Grep) and does not have access to network or arbitrary command execution tools.
- Sanitization: The instructions do not specify any sanitization, filtering, or validation of the content read from the external file before it is used to generate the structured output.
Audit Metadata