long-form-writer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external JSON files, such as data sources and chat history, to generate content. This creates a surface where malicious instructions embedded in the input data could influence the agent's behavior.
- Ingestion points: The
scripts/generate.pyscript ingests data from files provided via the--dataand--casesarguments. - Boundary markers: There are no specific delimiters or instructions defined in the workflow to differentiate between the agent's instructions and the content being processed.
- Capability inventory: The skill performs file read and write operations. The generated output is intended for integration with other tools (e.g., email-sender, pdf), which increases the potential impact of a successful injection.
- Sanitization: The script does not perform any validation or sanitization of the input data before interpolating it into the generated markdown document.
Audit Metadata