attribution
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill demonstrates security awareness by defining clear operational boundaries and referring to specialized skills for adjacent tasks. It provides educational content and implementation guides that follow standard industry practices.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing and interpreting external marketing data, which presents a surface for indirect prompt injection from untrusted data sources.
- Ingestion points: Marketing performance data from CRMs, web analytics platforms, and user-provided survey responses (referenced in SKILL.md and references/by-business-type.md).
- Boundary markers: Absent; the agent is not provided with specific delimiters or "ignore instructions" wrappers for the data it processes.
- Capability inventory: Data analysis, reconciliation, and reporting. The skill does not instruct the agent to use subprocesses, write to files, or perform network operations as part of its own execution logic.
- Sanitization: No explicit validation or sanitization for incoming marketing datasets or survey strings is described.
Audit Metadata