technical-writing
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted text inputs such as PR descriptions, issues, and READMEs, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Technical documents, RFCs, READMEs, PR descriptions, commit messages, tickets, and issues.
- Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the content being reviewed or rewritten.
- Capability inventory: The skill is limited to providing text editing and review guidelines. It does not utilize any tools for network communication, file system access, or command execution.
- Sanitization: There are no requirements for sanitizing or filtering external content before processing.
Audit Metadata