material-ingest
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from user-provided articles, creating a surface for indirect prompt injection attacks.
- Ingestion points: External articles or text snippets shared by the user for processing as described in the SKILL.md metadata and instructions.
- Boundary markers: The instructions lack explicit delimitation or instructions to ignore instructions found within the article text.
- Capability inventory: The skill has the capability to read, write, and list files within the './writing-workspace/' directory tree.
- Sanitization: While the skill instructs the agent to escape JSON special characters for formatting, it does not include measures to sanitize or filter potential malicious prompt instructions within the source content.
Audit Metadata