affiliate-blog-builder
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses web search and browsing tools to ingest content from external, untrusted websites for article generation, creating an attack surface.
- Ingestion points: External content from the
web_searchandweb_browsetools is processed in Steps 1, 2, and 3 of the workflow defined inSKILL.mdto determine article format, keywords, and content. - Boundary markers: The instructions do not define specific delimiters or directives for the agent to distinguish between its own instructions and potentially malicious commands embedded in the external search results.
- Capability inventory: The skill uses
web_searchandweb_browseas specified in theagents/openai.yamlconfiguration. - Sanitization: There is no implemented logic for filtering, validating, or sanitizing external content before it is processed for article creation.
Audit Metadata