content-repurpose
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting and processing untrusted external data, which inherently creates a surface for indirect prompt injection if the source content contains malicious instructions.
- Ingestion points: The skill is designed to process user-provided transcripts, blog posts, articles, scripts, outlines, talk notes, and content retrieved from URLs as specified in
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or "ignore" markers to isolate the user-provided content from the skill's own instructions.
- Capability inventory: The skill is limited to text generation and transformation (distilling content for newsletters, LinkedIn, and social media platforms).
- Sanitization: There is no evidence of input validation or content filtering to mitigate embedded instructions in the source text.
Audit Metadata