founder-content-writer
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user input to generate long-form articles that are subsequently saved to the file system. It lacks explicit instructions to the agent to treat user-provided topics as data rather than instructions, creating a surface for indirect prompt injection.
- Ingestion points: User-supplied writing parameters (Topic, Title, Key Points) as defined in the 'Workflow' section of SKILL.md.
- Boundary markers: Absent; there are no delimiters or instructions to ignore embedded commands within the user's content.
- Capability inventory: The skill utilizes file writing capabilities to save the generated content as a Markdown file ({Title}_Article.md).
- Sanitization: No sanitization or content validation is implemented for the data processed during the content generation phase.
Audit Metadata