content-engine
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes an external tool
npx @ericrisco/rsc copy checkto validate copywriting against banned phrases and runs a local shell scriptscripts/verify.shfor CSV validation. \n- [EXTERNAL_DOWNLOADS]: The use ofnpxresults in the download and execution of the@ericrisco/rscpackage from the npm registry at runtime. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the02-DOCS/directory, including brand studies and raw interview exports, to generate editorial plans. This creates a surface where embedded instructions in these documents could potentially influence the agent's planning output. \n - Ingestion points:
02-DOCS/(brand study, pillars, raw inputs). \n - Boundary markers: Not present. \n
- Capability inventory: Local script execution, external package execution via
npx, and file system writes to02-DOCS/. \n - Sanitization: No explicit sanitization or validation of the input file content before processing.
Audit Metadata