blog-analyze
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from untrusted external URLs and local files, which may contain instructions intended to override the agent's behavior during the analysis or subsequent rewriting phase.
- Ingestion points: The skill reads local files and fetches content from URLs via the WebFetch tool as described in the 'Input Handling' section of SKILL.md.
- Boundary markers: There are no instructions provided to the agent to use delimiters or to disregard any embedded instructions within the blog content being analyzed.
- Capability inventory: The execution environment allows access to Bash, Write, and WebFetch tools, creating a pathway where processed content could influence more sensitive operations.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the ingested content before it is processed by the agent.
Audit Metadata