writing-editor
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze and critique user-supplied writing drafts, which serves as an ingestion point for untrusted data.
- Ingestion points: User-provided writing drafts processed during the editorial passes (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or provide the agent with explicit instructions to ignore commands that may be embedded within the user's text.
- Capability inventory: The skill does not define or use any tools for file system modification, network communication, or code execution, significantly limiting the impact of any potential injection.
- Sanitization: There is no evidence of sanitization, filtering, or escaping of the user-provided content before it is processed by the agent.
Audit Metadata