blog
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided data, creating a potential surface for indirect prompt injection.
- Ingestion points: The
scripts/analyze_blog.pyscript reads the contents of local files (Markdown, MDX, HTML) and directories provided by the user for quality auditing. - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings when the agent reads and analyzes the content of these external files.
- Capability inventory: The skill has the capability to read local files, write content to the filesystem via the
blog-writeragent, and perform web searches via theblog-researcheragent. - Sanitization: There is no evidence of sanitization, escaping, or filtering of the ingested file content before it is processed by the agent or the analysis script.
- [EXTERNAL_DOWNLOADS]: The
scripts/analyze_blog.pyscript identifies and suggests the installation of well-known third-party libraries. - Evidence: The script mentions
textstatandbeautifulsoup4as optional dependencies for advanced readability and HTML parsing metrics. These are widely recognized and established packages in the Python ecosystem. - [COMMAND_EXECUTION]: The skill documentation includes examples of command-line operations for environment testing.
- Evidence: The
references/ai-crawler-guide.mdfile containscurlandbashexamples to help users or developers verify AI crawler visibility and server-side rendering. These are provided as educational templates and are not executed automatically by the agent's instructions.
Audit Metadata