editorial-burgundy-principles-template
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts to generate customized editorial deck slides. This creates a vulnerability surface where malicious instructions in user data could influence the agent's output.
- Ingestion points: The workflow in
SKILL.mdinstructs the agent to replace copy inassets/template.htmlbased on user input to create a three-slide sequence. - Boundary markers: The skill lacks specific delimiters or "ignore embedded instructions" warnings when interpolating untrusted user data into the HTML template.
- Capability inventory: The skill utilizes the
file_writecapability to output the primaryindex.htmlartifact. - Sanitization: There are no instructions for escaping, validating, or filtering the user-provided content before it is embedded into the slide deck code.
Audit Metadata