customer-journey-map
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user arguments and external sources, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill instructs the agent to read user-provided files such as interview transcripts, survey data, and support tickets, as well as data provided through the $ARGUMENTS variable.
- Boundary markers: The instructions lack explicit delimiters or specific directives for the agent to disregard instructions potentially embedded within the external files.
- Capability inventory: The skill is configured to perform web searches and read local files to generate markdown content. It does not have access to dangerous capabilities such as arbitrary command execution, network exfiltration to unknown domains, or sensitive credential access.
- Sanitization: There is no evidence of input validation or sanitization for the data being processed.
Audit Metadata