markdown-lint-cleanup
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The 'Required Plugins' section mandates the use of a 'Superpowers' plugin and instructs the agent to 'prefer it over the default approach' for all build pipeline tasks, including design and code generation. This attempts to override the agent's standard operating procedures in favor of an unspecified tool.
- [PROMPT_INJECTION]: The skill processes untrusted markdown content, making it vulnerable to indirect prompt injection where hidden instructions in the documents could influence agent behavior. (1) Ingestion points: External markdown files targeted for linting cleanup. (2) Boundary markers: No delimiters or 'ignore' instructions are provided to separate data from commands. (3) Capability inventory: The agent is expected to read and write markdown files to apply formatting fixes. (4) Sanitization: No sanitization or validation of input markdown content is specified.
Audit Metadata