content-expert
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and metadata are focused on technical writing expertise and documentation strategy. No patterns associated with prompt injection, credential exfiltration, or unauthorized command execution were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing untrusted data from project files and the web, establishing a potential vector for indirect prompt injection.
- Ingestion points: Ingests content from local files via
Read,Glob, andGreptools, and external content viaWebFetchandWebSearchtools. - Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to ignore command-like text within the analyzed documentation.
- Capability inventory: Available tools are limited to information retrieval and web browsing; no file system write access or arbitrary shell execution capabilities are present.
- Sanitization: No explicit sanitization or input validation logic is described for the content ingested from the tools.
Audit Metadata