multi-program-manager
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied data regarding affiliate programs (names, URLs, niches) to generate a portfolio dashboard and action plan. This ingestion of untrusted data represents a potential attack surface for indirect prompt injection.\n
- Ingestion points: The programs array in the Input Schema within SKILL.md.\n
- Boundary markers: The skill instructions do not define specific delimiters or instructions to ignore potential commands embedded in program metadata.\n
- Capability inventory: The skill's workflow is limited to analytical calculations and output generation; no file system modifications, network requests, or shell command executions are present across the scripts.\n
- Sanitization: No input validation or escaping mechanisms are specified for the ingested program data.
Audit Metadata