content-engine
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external source material which serves as an attack surface for indirect prompt injection.
- Ingestion points: The 'Source-First Workflow' in
SKILL.mdinstructs the agent to ingest published articles, notes, memos, and transcripts. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the source material are present.
- Capability inventory: The skill references the
x-apitool for publishing output, which provides a path for injected instructions to affect external platforms. - Sanitization: The workflow does not specify any sanitization, escaping, or validation of the ingested content.
Audit Metadata