devrel-newsletter-issue

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEPERSISTENCEOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PERSISTENCE]: The skill stores task-related state (such as pending corrections and subject options) in a local file named devrel-context.md to maintain context between newsletter drafting sessions. This behavior is consistent with the skill's primary function of managing long-form content projects.
  • [OBFUSCATION]: The skill documentation recommends using zero-width characters (‌) for email preview text padding. This is a standard email development technique used to control the display of text in inbox previews and is not an attempt to hide malicious content from the user or the model.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data including URLs, user-provided notes, and project manager summaries. While this presents an indirect prompt injection surface, the skill implements several mitigations: it requires factual sentences to be traced to linked sources, explicitly forbids inventing details for blocked links, and performs a 'tone pass' to remove hype and unprovable claims. Its capabilities are limited to reading local project files and generating text, with no evidence of unsafe interpolation or network exfiltration tools being enabled.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 02:41 PM