writing-beats
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates within its intended scope as a writing utility. It performs routine file system operations (reading raw material and writing an article file) that are consistent with its primary purpose. No evidence of unauthorized network activity, credential harvesting, or privilege escalation was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external 'raw material' provided by the user, which represents a potential surface for indirect instructions if the input is not carefully handled.
- Ingestion points: The skill ingests raw material from user-provided markdown files as described in
SKILL.md. - Boundary markers: The skill lacks explicit delimiters or instructions to ignore potential commands embedded within the raw text.
- Capability inventory: The skill possesses file-read and file-write capabilities across the local file system.
- Sanitization: The instructions do not specify any validation or sanitization routines for the external text before it is processed or written to the article file.
Audit Metadata