content-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to process external data sources which could contain malicious prompts or hidden instructions.
- Ingestion points: The instructions in SKILL.md specify analyzing keyword exports, sales call transcripts, survey responses, and web search results from platforms like Reddit and Quora.
- Boundary markers: The skill does not provide specific delimiters or warnings to prevent the agent from following instructions potentially embedded within these external sources.
- Capability inventory: No dangerous system commands, network exfiltration tools, or dynamic execution patterns were identified in the skill's own code or referenced files.
- Sanitization: The instructions lack any requirement for the agent to sanitize or validate the external data before processing it.
Audit Metadata