content-strategy
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze potentially untrusted external data, such as sales call transcripts, customer survey responses, and search results from forums like Reddit and Quora. This creates a surface for indirect prompt injection, where malicious instructions could be embedded in the data to manipulate the agent.
- Ingestion points: Data entry occurs via the analysis of keyword exports, call transcripts, survey data, and forum research as described in the 'Content Ideation Sources' section of
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' directives to help the agent distinguish between data to be analyzed and instructions to be followed.
- Capability inventory: While the skill focuses on planning and strategy, it relies on the agent's core capabilities for data processing and analysis.
- Sanitization: No specific sanitization or filtering steps are defined for the external content before it is processed by the agent.
Audit Metadata