alterlab-nmc-podcast-producer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from potentially untrusted external sources, which creates a standard attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to "search the web" for trends and guest research (Workflow steps 1 and 2) and "read existing project files" like series bibles and content calendars for context (Workflow step 1).
- Boundary markers: There are no explicit instructions for the agent to use delimiters or "ignore embedded instructions" warnings when processing these external inputs.
- Capability inventory: The agent has the capability to perform web searches and write multiple structured markdown files to the project directory.
- Sanitization: The skill lacks specific instructions for sanitizing or validating external content before it is interpolated into scripts or show notes.
Audit Metadata