blog-repurpose
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (blog posts) which could potentially contain malicious instructions intended to influence the agent's behavior during the repurposing process.
- Ingestion points: Untrusted data enters the context in 'Step 1: Read & Analyze' where the agent reads the blog post content using the
Readtool. - Boundary markers: The instructions do not specify the use of delimiters (e.g., XML tags or triple quotes) or explicit system-level instructions to ignore embedded commands within the source text.
- Capability inventory: The skill possesses file system capabilities, specifically the
Writetool used to save output files in therepurposed/directory. - Sanitization: There are no requirements for sanitizing, escaping, or validating the input text before it is used to generate social media and script content.
Audit Metadata