writing-beats
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process 'raw material' from external markdown files provided by the user.
- Ingestion points: Content is read from a markdown file specified or passed by the user (referenced in
SKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the raw material pile.
- Capability inventory: The agent has the capability to read from and write to the local file system based on user-defined paths.
- Sanitization: There is no mention of sanitizing or escaping the content retrieved from the raw material file before it is processed by the agent. This creates a surface where malicious instructions embedded in the input text could influence the agent's behavior during the 'mining' process.
Audit Metadata