write-report
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes research findings and previous reports to generate marketing documents, creating a surface where malicious instructions in those sources could influence the agent's behavior. \n- Ingestion points: The skill reads data from
brand_knowledge_search,knowledge_search, and local foldersgooseworks-local/andgooseworks-reports/. \n- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the report generation workflow. \n- Capability inventory: The agent is instructed to write files to the local filesystem and use thesave-to-brainskill. \n- Sanitization: No sanitization or validation of the ingested findings is required by the instructions. \n- [COMMAND_EXECUTION]: The skill directs the agent to perform file system operations to save generated reports. \n- Evidence: SKILL.md §2 instructions include writing Markdown files togooseworks-reports/<brand-slug>/.
Audit Metadata