doc-coauthoring
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a procedural workflow for document creation, including context gathering, section-by-section drafting, and verification through reader testing. These actions are appropriate for the skill's stated intent.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it is designed to ingest data from external sources and use it to drive further agent actions.
- Ingestion points: Stage 1 instructions for fetching content from Slack, Teams, Google Drive, SharePoint, and direct user info dumps.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the ingested content.
- Capability inventory: The skill utilizes file system tools (create_file, str_replace) and sub-agent invocation based on the processed content.
- Sanitization: There is no mention of sanitizing or validating external content before processing.
Audit Metadata