review-writing
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted prose provided by the user or read from project files.
- Ingestion points: Content provided through the
$ARGUMENTSparameter or files found via glob patterns as described inSKILL.md. - Boundary markers: The skill does not define explicit delimiters or instructions to the agent to ignore embedded commands within the prose being reviewed.
- Capability inventory: The skill instructions require the agent to read files, search for reference files in the file system, and provide analysis with fix recommendations.
- Sanitization: No specific sanitization or filtering logic is provided to handle potentially malicious instructions embedded in the documents being reviewed.
Audit Metadata