to-spec-beats
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external source material, which constitutes an ingestion surface for indirect prompt injection. 1. Ingestion points: Instructions in SKILL.md direct the agent to read supplied sources and fact-checks. 2. Boundary markers: There are no explicit markers or instructions to ignore embedded commands within the input sources. 3. Capability inventory: The skill is restricted to file reading and writing structured markdown; it does not have access to network tools, shell execution, or sensitive system files. 4. Sanitization: No sanitization or validation of the input content is defined.
Audit Metadata