oma-academic-writing
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data that could contain instructions intended to subvert the agent's logic.\n
- Ingestion points: The skill accepts
rubric_or_constraint,existing_draft, andsource_dataas inputs, as defined in the Expected Inputs section ofSKILL.md.\n - Boundary markers: The instructions do not define explicit delimiters (e.g., XML tags or clear separators) or specific warnings to ignore embedded commands within the ingested content.\n
- Capability inventory: The skill possesses
READ,WRITE, andEDITprimitives that interact with the local filesystem (LOCAL_FS), as listed in the Logical Operations section.\n - Sanitization: There is no evidence of sanitization, escaping, or filtering of the external content before it is interpolated into the agent's active context.
Audit Metadata