technical-writer
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external data, which creates a potential surface for indirect prompt injection attacks.
- Ingestion points: The agent is instructed to review existing documentation, product features, and user feedback (SKILL.md).
- Boundary markers: The instructions do not define delimiters or specific markers to separate system prompts from untrusted external content.
- Capability inventory: The skill involves creating and maintaining documentation, implying file-write and repository-access capabilities.
- Sanitization: There are no explicit requirements for sanitizing or validating external feedback or data before it is processed by the agent.
Audit Metadata