alterlab-rma-content-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, which creates a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed to "Search the web for published content analysis studies," "Read existing project files," and analyze "media texts" (news, social media, etc.).
- Boundary markers: No specific delimiters or "ignore embedded instructions" protocols are defined for the analysis of external content.
- Capability inventory: The agent has the capability to perform web searches and write multiple structured markdown files to the local project directory (e.g., codebooks, protocols, and results reports).
- Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from external sources before it is processed or written to files.
Audit Metadata