proofread
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the documents it processes.
- Ingestion points: The skill reads content from
.texand.qmdfiles located in theSlides/andQuarto/directories as part of the proofreading process. - Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions when passing file content to the proofreader agent.
- Capability inventory: The skill utilizes the
AgentandTasktools to process data and theWritetool to generate report files in thequality_reports/directory. - Sanitization: The instructions do not specify any sanitization, escaping, or filtering of the external file content before it is processed by the AI sub-agent.
Audit Metadata