ai-content-audit
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external content (the "corpus"), which creates a surface for indirect prompt injection where malicious instructions embedded in the audited content could attempt to influence the agent's behavior.
- Ingestion points: The instructions prompt the agent to ask for a corpus of text or URLs to audit (SKILL.md).
- Boundary markers: There are no specific instructions or delimiters provided to isolate the content being analyzed or to warn the agent to ignore instructions embedded within that content.
- Capability inventory: The skill's functionality is limited to content analysis, triage planning, and reporting. It does not contain instructions for subprocess execution, file system writes, or network exfiltration.
- Sanitization: No validation or sanitization steps are defined for the ingested content.
Audit Metadata