marketing-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from multiple external sources, including YouTube comments, Discord messages, Crisp chats, and CRM notes.
- Ingestion points: Data enters the agent context through tools like
mcp__cogny__mcp__YouTube__list_comment_threads,mcp__cogny__mcp__Discord__get_channel_messages, and CRM search tools specified inSKILL.md. - Boundary markers: The skill uses a structured 'Failures: none' footer and relies on human review via tickets/findings for all output, but does not use explicit delimiters for external content within scripts.
- Capability inventory: The skill has access to
Bash,Write,Edit, and platform-specific tools for creating automations, tickets, and scripts. - Sanitization: The instructions recommend using
jqfor JSON filtering and deduplication, but lack specific natural language sanitization for embedded instructions in comments or chats. - [COMMAND_EXECUTION]: The
Bashtool is explicitly allowed and utilized for operational tasks, such as fetching page metadata withcurland processing JSON data withjqas described in thereferences/mcp-routing.mdfile. - [DYNAMIC_EXECUTION]: The skill utilizes the Cogny platform's
create_scriptcapability to generate deterministic JavaScript rules for marketing spend caps and logic thresholds. - [EXTERNAL_DOWNLOADS]: The skill connects to the vendor's official service at
https://app.cogny.com/mcpfor its primary data operations. This resource is provided by the skill author (Cogny AI).
Audit Metadata