building-marketing-campaign

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill frequently executes shell commands to manage Cloudflare infrastructure and interact with external APIs. This includes using npx wrangler for database management and worker deployment, as well as curl for Google Places API queries.
  • Evidence: configuring-measurement.md (Step 2 and 5) uses npx wrangler for D1 and Worker deployment. targeting-audience.md (Step 3) uses curl for local business research. configuring-sending.md (Step 3) executes a custom Node.js script with environment variables.
  • [INDIRECT_PROMPT_INJECTION]: The skill features an attack surface for indirect prompt injection as it ingests untrusted data from various external sources to inform its marketing strategy and content generation.
  • Ingestion points: analyzing-product.md (product reviews and support threads), targeting-audience.md (API results from Google Places), and executing-campaign.md (email replies synced via IMAP).
  • Boundary markers: The instructions do not specify the use of delimiters or warnings when the agent processes these external inputs.
  • Capability inventory: The skill has extensive capabilities including file system modification, shell command execution, and network operations (Buffer API, SMTP/IMAP).
  • Sanitization: No explicit sanitization or filtering of external content is defined before it is interpolated into campaign instructions.
  • [DYNAMIC_EXECUTION]: The skill performs dynamic SQL generation and execution for campaign measurement. It uses sed to modify a SQL template at runtime before executing it against the remote database.
  • Evidence: measuring-campaign.md (Step 3) generates report.sql dynamically and executes it via npx wrangler d1 execute.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of multiple Node.js packages and relies on npx to fetch and run external utilities for video generation and cloud management.
  • Evidence: assets/sender/package.json specifies dependencies on imapflow, mailparser, nodemailer, and yaml. The SKILL.md setup section references npx hyperframes and npx wrangler.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 01:45 PM