ai-content-creator
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied data such as topics and source text for content generation and rewriting. This creates a surface for indirect prompt injection, where instructions hidden within user input could attempt to influence the agent's actions during the template filling process.
- Ingestion points: User-provided parameters for the
/ai-content-generatorand/ai-content-rewritercommands, such as the '--topic' field. - Boundary markers: Absent. The templates do not employ delimiters or specific instructions to isolate user input from the system prompt.
- Capability inventory: The agent uses
Bash,Write, andEdittools to store generated content and quality reports in the.claude-flow/cache/directory. - Sanitization: There is no evidence of input validation or escaping of user-provided content before it is interpolated into the generation workflow.
Audit Metadata