content-strategy

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data including keyword exports (Ahrefs, SEMrush), sales call transcripts, survey responses, and forum posts from Reddit and Quora to generate marketing strategies. This creates a surface where instructions embedded in these inputs could influence the agent's output.
  • Ingestion points: External data sources identified include keyword data exports, customer call transcripts, survey responses, and web search results from community forums (SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested text.
  • Capability inventory: The agent's role is restricted to strategic analysis and planning (e.g., creating pillars and clusters). It does not have access to file-write operations, shell execution, or arbitrary network calls within this skill.
  • Sanitization: The skill lacks explicit instructions for sanitizing or filtering external content before analysis.
  • [SAFE]: The provided documentation for headless CMS selection (references/headless-cms.md) is purely informational, referencing well-known services and industry best practices for content modeling without security risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:13 PM