newsletter-digest-builder
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external article files provided by the user. While no dangerous capabilities were detected, the processing of external text content creates a potential surface for indirect prompt injection where instructions hidden in articles could attempt to manipulate the agent's output or prioritization logic.
- Ingestion points: Article content extracted from
.txtand.mdfiles provided by the user (identified in SKILL.md Step 1 and Step 2). - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the article text.
- Capability inventory: The skill is limited to reading files, extracting text, and generating a summary response; it does not perform network operations, subprocess execution, or file system modifications.
- Sanitization: There is no mention of sanitization or filtering of the processed article body text to prevent command or prompt injection.
Audit Metadata