blog-audit
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted markdown and HTML content from various project directories, creating a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Files with
.md,.mdx, and.htmlextensions located in directories likecontent/,posts/,blog/, and others specified in Step 1 of SKILL.md. - Boundary markers: The instructions lack specific boundary markers or requirements for the agent to ignore instructions embedded within the blog content during analysis.
- Capability inventory: The skill uses subagents (via the
Tasktool) to perform parallel analysis and has the capability to write a report file (blog-audit-report.md) to the project root. - Sanitization: There is no mention of sanitization or validation of the data extracted from the blog files before it is processed or used to generate the report.
Audit Metadata