blog-article-writer
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (e.g.,
analyze_articles.py,generate_blog_outline.py,write_article.py) to perform article analysis and generation. These commands are run within a virtual environment as per the skill's instructions. - [PROMPT_INJECTION]: The skill ingests untrusted data from the
WebSearchtool and local files within thereferences/directory. This creates a surface for indirect prompt injection where instructions embedded in external content could potentially influence the agent's behavior. However, this is a standard risk for content creation skills and no active exploit was found. - [SAFE]: No obfuscation, data exfiltration, or persistence mechanisms were found in the skill's instructions.
Audit Metadata