blog-post-writer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a creative writing assistant that transforms unstructured text into blog posts. It operates entirely within the LLM's context using provided markdown reference files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content described as 'brain dumps'. While this is an ingestion point for untrusted data, the skill has no associated capabilities or tools (no file writing, network access, or command execution). Consequently, even if the input contained malicious instructions, there is no execution surface available to cause harm. The input is treated strictly as text to be summarized and styled.
- [DATA_EXPOSURE]: No sensitive file paths, environment variables, or hardcoded credentials were found. The skill only accesses its own bundled reference files in the
references/directory. - [REMOTE_CODE_EXECUTION]: There are no commands or instructions that download or execute external scripts or packages.
Audit Metadata