sitefire-write-all
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external actions to trigger article generation workflows.
- Ingestion points: Data entering the context from the list_actions and get_action tools (SKILL.md).
- Boundary markers: No explicit delimiters or instructions are used to isolate or ignore instructions embedded within the ingested briefing content.
- Capability inventory: The skill utilizes the write_article tool to generate content based on the input.
- Sanitization: No sanitization, validation, or escaping of the briefing data is described before it is passed to the generation tool.
Audit Metadata