compliance
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to ingest and analyze untrusted external content such as client emails, social media posts, and website copy. This creates a potential surface where malicious instructions embedded in the analyzed data could attempt to influence the agent's output or behavior.
- Ingestion points: Data enters the skill through user-pasted text, uploaded files, or results retrieved from external CRM and portfolio system connectors.
- Boundary markers: The instructions do not specify the use of clear delimiters or 'ignore' instructions when passing this external content to subagents like the
compliance-scanagent. - Capability inventory: The skill possesses the ability to read and write files (
<slug>-compliance-analysis.md) and interact with external systems viaToolSearchandListConnectors. - Sanitization: There are no explicit instructions for sanitizing or filtering the ingested content before it is processed by the AI.
Audit Metadata