newsletter-promo
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from a newsletter link or text which is then used to generate code. This creates a surface where malicious instructions within the newsletter could influence the agent's code generation.
- Ingestion points: The 'edition link' or 'full text' requested in Step 1 of SKILL.md.
- Boundary markers: No explicit markers or warnings are provided to the agent to ignore or delimit instructions embedded within the ingested newsletter content.
- Capability inventory: The skill instructs the agent to generate an index.html file in Step 3 based on the ingested data.
- Sanitization: The skill does not define any sanitization or validation steps for the external content before it is interpolated into the generation brief.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate a functional, self-contained HTML file (index.html) at runtime using a provided template brief and user-supplied data.
Audit Metadata