writing-fragments
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is instructed to read content from a user-specified file path and use that content as context for future operations. Malicious instructions placed within the target Markdown file could potentially influence the agent's behavior.
- Ingestion points: The instructions in
SKILL.mdrequire the agent to "re-read the file from disk" before every write operation to preserve user edits. - Boundary markers: The skill does not specify the use of delimiters or protective warnings to isolate the ingested file content from the agent's core logic.
- Capability inventory: The skill utilizes file-read and file-write capabilities to manage the fragment document.
- Sanitization: There is no evidence of content sanitization or validation performed on the data read from the local file.
Audit Metadata