content-and-copy
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation and templates. It does not contain any scripts, binaries, or configuration changes that would pose a risk to the host environment.
- [NO_CODE]: No code (Python, JavaScript, Shell, etc.) is included in this skill, which eliminates common attack vectors like remote code execution or persistence.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process user-provided content for drafting and editing, creating a potential ingestion point for indirect prompt injection. Evidence chain: (1) Ingestion point: user-supplied text to be edited; (2) Boundary markers: none specified; (3) Capability inventory: none (no dangerous tools or scripts); (4) Sanitization: none. The risk is negligible as the skill lacks high-privilege tools or network capabilities that could be exploited via the processed text.
Audit Metadata