article-write
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common shell commands to manage its workflow. It uses
git rev-parse --show-toplevelto identify the project root for storing metadata andopenssl rand -hex 4to generate unique article identifiers. Additionally, it usesmvto synchronize storage directory names with article filenames. These commands are consistent with the skill's purpose as a development-oriented documentation tool. - [PROMPT_INJECTION]: The skill implements a workflow that reads and scans project source code to gather implementation details for articles. This creates an attack surface for indirect prompt injection (Category 8), as malicious instructions or adversarial content embedded within the scanned repository files could potentially influence the agent's reasoning or output. This risk is inherent to the skill's function and is managed through structured data storage in 'materials.md' and user verification checkpoints.
Audit Metadata