content-research-writer
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content such as research sources, writing samples, and articles, which creates a surface for indirect prompt injection.
- Ingestion points: The skill reads research sources, writing samples, and existing articles provided by the user or found during research (SKILL.md).
- Boundary markers: The instructions do not define the use of boundary markers or delimiters to isolate untrusted external content when it is interpolated into the agent's context.
- Capability inventory: The skill's capabilities are limited to text processing, file reading, and outline generation; no high-risk capabilities like arbitrary command execution, persistence, or sensitive data exfiltration were identified.
- Sanitization: There is no mention of sanitizing, escaping, or validating external content before it is processed by the agent.
Audit Metadata