content-expert

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions and metadata are focused on technical writing expertise and documentation strategy. No patterns associated with prompt injection, credential exfiltration, or unauthorized command execution were identified.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing untrusted data from project files and the web, establishing a potential vector for indirect prompt injection.
  • Ingestion points: Ingests content from local files via Read, Glob, and Grep tools, and external content via WebFetch and WebSearch tools.
  • Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to ignore command-like text within the analyzed documentation.
  • Capability inventory: Available tools are limited to information retrieval and web browsing; no file system write access or arbitrary shell execution capabilities are present.
  • Sanitization: No explicit sanitization or input validation logic is described for the content ingested from the tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 07:33 PM