article-enrichment
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
gbrainCLI tool for querying, reading, and writing markdown files in the localmedia/articles/directory. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes raw, untrusted article content without protective measures.
- Ingestion points: Raw article text is loaded via
gbrain getfrom the local file system. - Boundary markers: Absent. The skill does not specify any delimiters or safety prompts to isolate the ingested text.
- Capability inventory: File system read and write operations provided by the
gbraintoolset. - Sanitization: Absent. No filtering or validation of the article source text is performed before LLM processing.
Audit Metadata