write-post
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it is designed to ingest and process data from the local repository, which may contain untrusted content.
- Ingestion points: Local source code, documentation files, and mirrors (Workflow Step 2).
- Boundary markers: The instructions do not specify boundary markers or explicit instructions to treat the ingested file content as raw data only.
- Capability inventory: The skill requires file system reading (via grep and direct read) and file system writing (within the
docs/posts/directory). - Sanitization: There are no explicit sanitization steps provided for the content retrieved from the repository before it is interpolated into the generated draft.
Audit Metadata