case-study-writer
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, such as project notes and call transcripts, which serves as a potential surface for indirect prompt injection attacks.
- Ingestion points: User-supplied project notes, call transcripts, and existing case materials are processed to extract data (found in SKILL.md under Step 1 — Intake).
- Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded commands within the ingested materials.
- Capability inventory: The skill's primary function is text generation; analysis confirms it does not utilize network operations, file system writes, or dynamic code execution.
- Sanitization: There is no evidence of input sanitization or filtering for the provided materials.
Audit Metadata