asset-templates
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or suspicious network activities were detected. The skill performs its stated function of generating documents using local template assets.
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided content into formatted report templates located in the
assets/directory. - Ingestion points: User data is used to fill
{{PROJECT_NAME}},{{STATUS}}, and{{DATE}}placeholders inassets/template.txt. - Boundary markers: None present; the instructions do not specify delimiters to separate user data from the template structure.
- Capability inventory: The skill is limited to reading its own resources via
read_skill_resourceand returning text output. - Sanitization: No validation or sanitization of user input is implemented before interpolation.
Audit Metadata