moments-writer-lite
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates the user-provided
topicparameter directly into the system instructions for the agent without sanitization. - Ingestion points: The
topicargument in themomentsWriterfunction inmain.jsaccepts arbitrary string input from the user. - Boundary markers: The code lacks delimiters (such as XML tags or unique separators) or specific "ignore embedded instructions" warnings to prevent the AI from following commands hidden within the
topictext. - Capability inventory: Analysis of
main.jsandmanifest.jsonshows no dangerous capabilities such as file system writes, network requests, or shell command execution, which significantly limits the potential impact of an injection. - Sanitization: There is no evidence of input validation, character escaping, or filtering for the
topicinput before it is included in the prompt template.
Audit Metadata