premium-commercial-writing
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to process external, untrusted content such as document drafts, proposals, and articles to generate revised commercial copy. This creates a potential surface for indirect prompt injection attacks where malicious instructions embedded in the input text could influence the agent's behavior. \n
- Ingestion points: The skill accepts drafts, audience descriptions, and proof sources as inputs as defined in the 'Inputs' section of
SKILL.md. \n - Boundary markers: The instructions lack explicit delimitation (such as XML tags or unique separators) to help the agent distinguish between writing instructions and the content of the processed draft. \n
- Capability inventory: The skill's workflow is limited to text analysis and editing; it does not include scripts or tools for subprocess execution, network operations, or unauthorized file system access. \n
- Sanitization: No explicit sanitization or filtering logic is present to identify or neutralize embedded prompts in the input documents.
Audit Metadata