lead-magnets
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external, untrusted data from survey exports (Typeform, CSV, Google Forms) to generate lead magnet strategies and briefs.
- Ingestion points: The workflow in
references/survey-to-lead-magnet.mdinstructs the agent to ingest survey exports or pasted responses. - Boundary markers: There are no specific delimiters or instructions to treat external data as untrusted, increasing the risk of the agent following instructions embedded within survey responses.
- Capability inventory: The skill performs data analysis and content generation, and while no scripts were provided, the
SKILL.mdfile indicates the presence of executable helpers in thescripts/directory. - Sanitization: No validation, escaping, or filtering steps are defined to sanitize survey content before processing.
Audit Metadata