create-post
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include running
npm run validate:postswithin thetemplates/nextdirectory to verify the created Markdown files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external user-supplied data (article bodies or outlines) to generate files and metadata, creating a surface where malicious instructions in the input could potentially influence agent behavior.
- Ingestion points: Processes user-supplied article body, outline, or brief in
SKILL.md. - Boundary markers: No explicit delimiters or guardrails are defined to isolate user-provided content from the skill's execution logic.
- Capability inventory: The skill is capable of writing new Markdown files to the filesystem and executing local
npmscripts. - Sanitization: No sanitization of the user-provided Markdown body is specified, although frontmatter is validated against a schema.
Audit Metadata