internal-comms
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its core workflow of ingesting and summarizing external data.\n
- Ingestion points: The instructions in
examples/3p-updates.md,examples/company-newsletter.md, andexamples/faq-answers.mddirect the agent to retrieve data from Slack, Email, Google Drive, and Calendar.\n - Boundary markers: There are no instructions to use delimiters or ignore instructions embedded within the ingested data sources.\n
- Capability inventory: The agent generates high-visibility output (newsletters, FAQs, status reports) which are then distributed internally.\n
- Sanitization: No logic is provided to sanitize or validate the content retrieved from external tools.\n- [NO_CODE]: The skill contains only Markdown documentation and instructions; it does not include any executable scripts, binaries, or code files.
Audit Metadata