professional-proofreader
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process text from external document files, which can be used to deliver hidden instructions to the agent.\n
- Ingestion points: As specified in
references/file-processing-mode.md, the skill reads content from.docx,.txt, and.pdffiles.\n - Boundary markers: The instructions do not define the use of delimiters or specific prompts to ensure the agent ignores any instructions embedded within the processed text.\n
- Capability inventory: The skill instructions in
SKILL.mdandreferences/file-processing-mode.mdpermit both reading from the file system and writing new files.\n - Sanitization: There is no mention of sanitizing, escaping, or validating the text extracted from documents to prevent the execution of embedded prompts.
Audit Metadata