docs-frontmatter-audit
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted markdown files from the local filesystem to audit frontmatter metadata. Ingestion points: File content is accessed via the Read and Glob tools as specified in the Execution section of SKILL.md. Boundary markers: The instructions do not define delimiters or specific warnings to ignore embedded instructions within the audited documents. Capability inventory: The skill utilizes Read, Grep, and Glob for file operations. Sanitization: No explicit sanitization or filtering of external file content is implemented. This vulnerability surface is inherent to the skill's purpose of auditing arbitrary text files.
Audit Metadata