self-media-content-delivery
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-generated content (drafts, scripts, and final versions) which creates a surface for indirect prompt injection during the verification and archival process.
- Ingestion points: User-provided content milestones and delivery packages are processed for file storage as described in
SKILL.md. - Boundary markers: Absent; the instructions do not include specific delimiters or warnings to the agent to ignore instructions embedded within the user content.
- Capability inventory: The agent is authorized to perform file writing operations to the local file system and read files back to verify integrity and extract asset paths (
SKILL.md). - Sanitization: No sanitization or filtering logic is defined for the content being processed.
- [NO_CODE]: The skill consists exclusively of markdown documentation and YAML configuration files. No executable scripts (Python, Node.js, Shell), binaries, or runtime dependencies are present in the package, significantly reducing the attack surface.
Audit Metadata