writing-beats
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted 'raw material' provided by the user in markdown files, which could theoretically contain malicious instructions designed to influence the agent.
- Ingestion points: The agent reads raw material from markdown files stored on the local disk.
- Boundary markers: The instructions do not define specific delimiters or 'ignore' commands to isolate the raw material from the agent's logic.
- Capability inventory: The skill is authorized to read from and write to the local file system as part of the creative writing process.
- Sanitization: There is no evidence of sanitization or filtering of the input text to prevent embedded instruction execution.
Audit Metadata