writing-beats
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external 'raw material' provided by users and frequently re-reads the 'article file' from disk. This creates a surface for indirect prompt injection where instructions embedded in the material could influence the agent's output or actions.
- Ingestion points: Processes 'raw material' (markdown file) and re-reads the 'article file' from disk.
- Boundary markers: The instructions lack explicit markers or delimiters to differentiate between system instructions and the untrusted content being processed.
- Capability inventory: The skill utilizes file system tools to read from and write to the local disk. No network or arbitrary command execution capabilities were identified.
- Sanitization: There is no evidence of sanitization or filtering of the content pulled from the raw material before it is used to generate beats.
Audit Metadata