interactive-intro-writer
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by reading, analyzing, and editing user-supplied LaTeX files and notes, which introduces a potential attack surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The agent processes user-provided
.texfiles and free-text notes as part of the core dialogue workflow described inSKILL.mdandREADME.md. - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the agent when processing external content.
- Capability inventory: The skill is configured with access to
Read,Write,Edit, andBashtools in theSKILL.mdfrontmatter. - Sanitization: There is no evidence of sanitization, escaping, or validation being applied to the ingested LaTeX content or notes.
Audit Metadata