prose-edit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to implement itsdiff-checkmode. This mode executes git commands to retrieve changes from specific commits or ranges, allowing the agent to perform linting on newly added text lines. This is a functional use of shell tools for a development-oriented writing workflow. - [INDIRECT_PROMPT_INJECTION]: As a text processing tool, this skill possesses an inherent attack surface for indirect prompt injection by reading untrusted content from user-provided files.
- Ingestion points: Text is ingested from any file target (markdown, LaTeX, plain text) via the
rewrite,chapter, andlintcommands. - Boundary markers: The instructions lack specific requirements for the agent to wrap processed text in delimiters or to ignore instructions embedded within the fiction fragments.
- Capability inventory: The skill is granted
Bash,Write, andEditcapabilities, which could be leveraged if the agent obeys malicious instructions found in a text file. - Sanitization: No input sanitization or filtering is prescribed for the text being processed.
Audit Metadata