blog-post
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands including
lsto read directory contents andnpm run devto launch a local development server for previewing blog changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests existing blog posts to calibrate its writing style, which represents a potential data ingestion surface. 1. Ingestion points: Local markdown files located at
/Users/espen/Dev/e9n.dev/src/posts/. 2. Boundary markers: Absent. 3. Capability inventory: Local shell command execution (ls,npm) and file system writes for creating new posts. 4. Sanitization: No explicit filtering or sanitization of the ingested text is performed.
Audit Metadata