editorial-engineer

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a legitimate writing tool that follows secure repository management practices. No malicious code, exfiltration logic, or privilege escalation patterns were identified.
  • [DATA_EXFILTRATION]: The skill reads existing blog files from standard content directories (e.g., src/content/blog/) to extract stylistic 'voice tokens'. This access is strictly bounded to the skill's stated purpose of matching the author's voice and does not target sensitive system or credential files.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes data from user briefs and external research agents. This is mitigated by the skill's intensive editorial workflows.
  • Ingestion points: Untrusted data enters the agent context through user-provided briefs and reports from research sub-agents (as detailed in references/modes.md).
  • Boundary markers: No explicit boundary markers or 'ignore' instructions for the research data are defined in the prompt templates.
  • Capability inventory: The skill possesses file-read and file-write capabilities restricted to project-specific content and planning directories (detailed in references/seo-and-files.md).
  • Sanitization: The skill mandates a rigorous three-stage humanization and 'soul check' process (Stage 6) that audits the draft for AI tells and verifies claims, effectively acting as a quality-focused sanitization layer for ingested research.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:42 AM
Security Audit — agent-trust-hub — editorial-engineer