writing-fragments
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process data from a local file that can be modified by external actors or the user between sessions.
- Ingestion points: The skill instructions in
SKILL.mdrequire the agent to re-read the target markdown file from disk before every write operation to preserve user changes. - Boundary markers: No specific boundary markers or instructions to treat the file content as untrusted data are present. The agent is not warned to ignore instructions that may be embedded within the fragments.
- Capability inventory: The skill possesses the capability to read from and write to the local file system as described in
SKILL.md. - Sanitization: There is no evidence of content sanitization or validation performed on the data read from the file before it is incorporated back into the agent's context.
Audit Metadata