edit-risen-prompt
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user data from external files, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads user-specified files (messy notes or existing prompts) as input for transformation or auditing in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious content embedded within the input files.
- Capability inventory: The skill is granted access to file system tools including Read, Write, Edit, Glob, and Grep in SKILL.md, allowing it to modify the local environment based on instructions derived from processed content.
- Sanitization: The skill lacks mechanisms to sanitize or validate the content of the ingested files before using them to generate instructions or reports.
Audit Metadata