account-tiering

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill is designed to ingest and analyze data from external sources, including emails, chat transcripts, and documents, which could contain unintended instructions.
  • Ingestion Points: Data is pulled from email bodies, CRM contact records, and uploaded book spreadsheets as detailed in SKILL.md.
  • Boundary Markers: The skill explicitly defines external content as untrusted and instructs the agent to treat it as data only, ignoring any embedded instructions.
  • Capability Inventory: The agent accesses CRM records and email threads to generate scoring and recommendations, with suggested actions requiring user confirmation.
  • Sanitization Measures: Robust rules are in place to prevent the rendering of links found within untrusted content and to ensure content-originated actions are shown to the user before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:11 PM