Content Research Writer
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection.
- Ingestion points: User-provided topics and research subjects are ingested directly into the agent's context as shown in the 'How to Use' section of SKILL.md.
- Boundary markers: No delimiters or explicit instructions are provided to the agent to treat user-provided data as untrusted or to ignore embedded instructions.
- Capability inventory: The skill is configured to use the 'office-mcp' server with 'create_docx' and 'md_to_docx' tools, allowing it to write content to the file system.
- Sanitization: There is no evidence of input validation or content filtering before the data is passed to the document creation tools.
- [NO_CODE]: The skill consists entirely of YAML frontmatter and Markdown instructions, containing no Python, JavaScript, or shell scripts that could execute malicious logic.
Audit Metadata