alterlab-pra-report-generator
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external information from campaign-related files and web search results, creating a surface for indirect prompt injection attacks.
- Ingestion points: The agent is instructed to read project files (campaign briefs, media plans, and raw performance data) and search the web for industry benchmarks.
- Boundary markers: There are no specified delimiters or instructions for the agent to treat external content as untrusted data rather than active instructions.
- Capability inventory: The skill allows the agent to perform web searches and write markdown files (e.g., reports, dashboards, learning agendas) directly to the project directory.
- Sanitization: The instructions do not define any sanitization, filtering, or validation steps for the data gathered from files or the web before it is used to generate deliverables.
Audit Metadata