writing-fragments

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to manage a local file system resource. It asks the user for a file path and performs periodic read and append operations to that Markdown file to store brainstorming notes.
  • [PROMPT_INJECTION]: The skill instructions create a surface for indirect prompt injection. By requiring the agent to 're-read [the file] from disk' before writing, the agent ingests data that could potentially contain instructions intended to influence its behavior. This is a common characteristic of document-editing tools and no specific exploits are identified.
  • [SAFE]: The skill's behavior is transparent and aligns with its stated purpose. There are no external dependencies, remote code downloads, or attempts to exfiltrate sensitive data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:16 AM
Security Audit — agent-trust-hub — writing-fragments