skills/espennilsen/pi/blog-post/Gen Agent Trust Hub

blog-post

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell commands including ls to read directory contents and npm run dev to launch a local development server for previewing blog changes.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests existing blog posts to calibrate its writing style, which represents a potential data ingestion surface. 1. Ingestion points: Local markdown files located at /Users/espen/Dev/e9n.dev/src/posts/. 2. Boundary markers: Absent. 3. Capability inventory: Local shell command execution (ls, npm) and file system writes for creating new posts. 4. Sanitization: No explicit filtering or sanitization of the ingested text is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 11:40 AM