book-idea-validator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided content, which introduces a potential vector for indirect prompt injection if the source document contains malicious instructions.
- Ingestion points: The
SKILL.mdfile specifies a workflow where the agent must 'Ask for the Book Concept Document' and 'Read it carefully' as the primary input for validation. - Boundary markers: The instructions do not define boundary markers (such as XML tags or clear delimiters) to isolate the user-provided content from the agent's core instructions.
- Capability inventory: The skill allows the agent to perform landscape research, analyze claims, and generate extensive documentation across 6 core and 27 optional markdown templates.
- Sanitization: There are no instructions or automated steps described to sanitize, validate, or filter the content of the concept document for potentially disruptive instructions before processing.
Audit Metadata