quote-drafter
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided content (client names, pricing, and project notes) and interpolates them directly into a prompt template.
- Ingestion points: User input captured via parameters like
[client name],[the work], and[pricing]. - Boundary markers: The template lacks explicit delimiters or instructions to ignore potential injection content within the user notes.
- Capability inventory: The skill is limited to text generation and does not invoke any system tools, shell commands, or network operations.
- Sanitization: There is no evidence of input validation or escaping for the provided notes.
- Because the skill lacks executable capabilities, the risk associated with this surface is negligible.
- [SAFE]: No obfuscation, data exfiltration patterns, or persistence mechanisms were detected. The skill's instructions are clear, transparent, and consistent with its stated purpose of document drafting.
Audit Metadata