publish-article
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize shell commands for verifying the integrity and status of published content.
- Uses
curl -Ito confirm that published URLs resolve with a 200 OK status. - Employs
grepto perform a link count audit on the markdown body. - Uses
diffto compare final publication payloads against the original user-supplied text. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied content for publication, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill ingests "supplied copy" or "finished text" provided by the user in
Supplied-copy modeas defined inSKILL.md. - Boundary markers: The skill explicitly labels this content as "approved copy" and "immutable," instructing the agent not to rewrite or replace the user's argument.
- Capability inventory: The skill utilizes
Bash,Write,Edit, andWebFetchtools to finalize and verify the publication. - Sanitization: The instructions recommend using "markdown formatting, escaping, [and] platform syntax" when handling the text, though the focus is on preserving the original message.
- [EXTERNAL_DOWNLOADS]: The skill interacts with several external services and APIs for research and media retrieval.
- Fetches image metadata and licensing information from the Wikimedia Commons API.
- References SEO and keyword research tools including Ahrefs, Semrush, and DataForSEO for volume validation.
- Mentions Google Search Console for retrieving actual search query data.
Audit Metadata