alterlab-pra-creative-brief
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external project files to generate new deliverables.
- Ingestion points: The skill reads various project files including marketing plans, research reports, brand guidelines, prior briefs, and creative output history as specified in the Workflow and Agentic Protocol sections of SKILL.md.
- Boundary markers: The instructions do not define any delimiters or provide warnings to the agent to ignore instructions that might be embedded within the project files it reads.
- Capability inventory: The agent has the ability to write new markdown files to the project directory and perform web searches based on findings from the ingested data.
- Sanitization: There is no evidence of sanitization, validation, or filtering of the content read from external files before it is processed and written into new deliverables.
Audit Metadata