content-research-writer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data during research and drafting phases, creating a potential surface for indirect prompt injection. \n
- Ingestion points: The skill is designed to read external information from search results and user-provided draft files (e.g., article-draft.md). \n
- Boundary markers: The instructions lack explicit delimitation or warnings to ignore embedded instructions in ingested data. \n
- Capability inventory: The skill utilizes file read/write capabilities and search tools. \n
- Sanitization: There are no instructions for sanitizing or validating content retrieved from external sources.
Audit Metadata