audit-offer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data such as offer documents, sales pages, and pitches. Malicious instructions embedded in these inputs could attempt to manipulate the agent's behavior during the audit process.
- Ingestion points: Processes data from
OFFER.md, sales pages, pitches, and product/service descriptions. - Boundary markers: The instructions do not define any delimiters or explicit safety warnings to help the agent distinguish between its instructions and the data being analyzed.
- Capability inventory: The skill is restricted to textual analysis and output generation; no network operations, file-writing outside the immediate context, or command execution capabilities were found.
- Sanitization: There is no evidence of sanitization or filtering logic applied to the external content before processing.
- [NO_CODE]: The skill consists entirely of natural language instructions and does not include any accompanying scripts or executables.
Audit Metadata