write-real-estate-astro-data
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill instructions are focused on legitimate content management tasks and adhere to the project's data architecture.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface as it processes existing project files to maintain content consistency across the corpus.
- Ingestion points: The agent reads existing Markdown and MDX files from the
src/datadirectory and schema definitions fromsrc/content/config.tsusingread_fileandsearch_codetools. - Boundary markers: There are no explicit prompt delimiters for untrusted data; however, the skill includes a specific security guardrail (ASI06) that instructs the agent to treat retrieved research as untrusted and verify claims against live sources.
- Capability inventory: The skill is authorized to use
read_file,write_file,edit_file,create_file, andsearch_codeto manipulate the project's content files. - Sanitization: No automated sanitization is implemented; the skill relies on the agent's internal safety guardrails and the mandatory human-in-the-loop editorial review process described in the 'Output Contracts'.
Audit Metadata