content-planner

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: All core functionalities, including network research and filesystem write operations, are aligned with the skill's stated purpose of content creation and management. No suspicious obfuscation or hidden logic was detected.
  • [PROMPT_INJECTION]: The skill exhibits an inherent surface for indirect prompt injection because it reads and processes data from external URLs (via WebFetch) and user-provided documents. Ingestion points: Untrusted data enters the agent context through user files in Phase 1, Step 1 and external web content in Step 3. Boundary markers: The instructions do not define specific delimiters or guidelines for the agent to distinguish between its primary instructions and any instructions embedded within the fetched content. Capability inventory: The skill is configured to write generated articles to multiple files on the local filesystem. Sanitization: No explicit sanitization, filtering, or validation of the external content is described before it is used for planning or writing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 08:30 AM