create-technology-insight-report-rd
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a rigorous workflow for technology reporting with explicit legal disclaimers and specialist review requirements.
- [SAFE]: The included utility scripts (quality_check.py, sop_checklist.py) utilize standard libraries to perform static analysis and print checklists without external dependencies or dangerous system calls.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources (patents, papers, market reports) which represents a standard ingestion surface. The skill incorporates mitigation strategies including text escaping, human review stages, and automated checks to detect unsafe content in generated outputs.
- [SAFE]: The quality_check.py script proactively scans for security anti-patterns in generated reports, such as local file paths (file:///), external scripts, and potentially unsafe JavaScript methods like innerHTML or document.write.
Audit Metadata