plt-fill-template
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a framework for managing document templates. All operations are limited to reading and writing markdown files within the provided library.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests data from external markdown files. 1. Ingestion points: manifest.json and markdown files in the templates/ directory. 2. Boundary markers: The skill uses parseable HTML comments to delimit guidance within templates. 3. Capability inventory: File read/write operations for documentation; no subprocess, network, or dynamic execution capabilities identified. 4. Sanitization: No explicit sanitization of ingested template content. The risk is minimal as the data sources are part of the skill's own library.
Audit Metadata