cold-email-nurture
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions and templates for generating email sequences. It does not execute code, perform network requests, or access sensitive system files.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template that processes external inputs (pain_signal_profile, evp). While it lacks explicit boundary markers to prevent the agent from following instructions embedded in that data, this is inherent to its primary purpose as a content generator and poses minimal risk in this context.
- Ingestion points: pain_signal_profile and evp inputs defined in SKILL.md.
- Boundary markers: Absent; the skill does not use delimiters to wrap input variables.
- Capability inventory: Includes Read, Write, and Grep tool access.
- Sanitization: Absent; no input validation or sanitization logic is present.
Audit Metadata