review-the-work
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and stress-test external deliverables (such as positioning statements, value propositions, and sales scripts), creating a surface for potential indirect prompt injection attacks. * Ingestion points: The agent is instructed to run reviews on substantive GTM deliverables which can be supplied by the user or other agents. * Boundary markers: The skill does not define clear delimiters or include specific instructions for the agent to ignore potentially malicious embedded content within the deliverables. * Capability inventory: The skill does not request or demonstrate any dangerous capabilities such as file system writing, network exfiltration to untrusted domains, or shell command execution. * Sanitization: No input validation or sanitization procedures are specified for the deliverables being reviewed.
Audit Metadata