morocco-cod-marketing
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, such as product URLs and image descriptions, which represents a potential attack surface for indirect instructions. Ingestion points: Checkpoint 1 in
SKILL.mdaccepts external product URLs and images for analysis. Boundary markers: Thereferences/research-offers.mdfile contains a specific safety warning that external pages are untrusted data and not instructions. Capability inventory: The skill has the ability to write to a local Obsidian vault and read from the network to fetch external content. Sanitization: The instructions mandate separating factual evidence from interpretation and treating external data as hypotheses. - [EXTERNAL_DOWNLOADS]: The skill fetches content from external sources for research and inspiration. It includes links to external Notion pages for creative strategies in
references/creative-strategy-inspiration.md. It also performs downloads of product images from external URLs into a local directory as defined inreferences/vault-persistence.md.
Audit Metadata