prose-distill
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data provided via text input or file paths.
- Ingestion points: The skill accepts raw text or file paths through the
$ARGUMENTSparameter inSKILL.md. - Boundary markers: The instructions do not define clear delimiters (such as XML tags or specific block markers) or provide explicit directives to ignore instructions that might be embedded within the text to be distilled.
- Capability inventory: The skill is configured with tools like
Read,Edit,Write,Grep, andGlob, which provide the agent with the ability to modify the local file system based on instructions it processes. - Sanitization: There is no evidence of input validation, filtering, or escaping for the content being processed.
Audit Metadata