writing-fragments
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill instructions require the agent to re-read the contents of the target markdown file from disk before every write operation. 1. Ingestion points: User-specified markdown file path. 2. Boundary markers: Absent; there are no instructions to ignore embedded commands within the read content. 3. Capability inventory: Local file system read and write access. 4. Sanitization: Absent; no validation or filtering of the file content is performed. Evidence in SKILL.md: 'Before every write: re-read the file from disk.'
Audit Metadata