building-marketing-campaign
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently executes shell commands to manage Cloudflare infrastructure and interact with external APIs. This includes using
npx wranglerfor database management and worker deployment, as well ascurlfor Google Places API queries. - Evidence:
configuring-measurement.md(Step 2 and 5) usesnpx wranglerfor D1 and Worker deployment.targeting-audience.md(Step 3) usescurlfor local business research.configuring-sending.md(Step 3) executes a custom Node.js script with environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill features an attack surface for indirect prompt injection as it ingests untrusted data from various external sources to inform its marketing strategy and content generation.
- Ingestion points:
analyzing-product.md(product reviews and support threads),targeting-audience.md(API results from Google Places), andexecuting-campaign.md(email replies synced via IMAP). - Boundary markers: The instructions do not specify the use of delimiters or warnings when the agent processes these external inputs.
- Capability inventory: The skill has extensive capabilities including file system modification, shell command execution, and network operations (Buffer API, SMTP/IMAP).
- Sanitization: No explicit sanitization or filtering of external content is defined before it is interpolated into campaign instructions.
- [DYNAMIC_EXECUTION]: The skill performs dynamic SQL generation and execution for campaign measurement. It uses
sedto modify a SQL template at runtime before executing it against the remote database. - Evidence:
measuring-campaign.md(Step 3) generatesreport.sqldynamically and executes it vianpx wrangler d1 execute. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of multiple Node.js packages and relies on
npxto fetch and run external utilities for video generation and cloud management. - Evidence:
assets/sender/package.jsonspecifies dependencies onimapflow,mailparser,nodemailer, andyaml. TheSKILL.mdsetup section referencesnpx hyperframesandnpx wrangler.
Audit Metadata