cold-email
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, command executions, or network exfiltration were found. The skill is entirely composed of educational content and email templates.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface as it ingests data from external context files.
- Ingestion points: The skill references dependencies such as
icp-sales.md,value-prop.md, andproof-points.mdfrom thesales-contextskill, as well as lead lists fromlead-generator. - Boundary markers: Absent. The email templates interpolate variables like
[Produkt],[Obserwacja], and[Imię]directly into the email body without delimiters to prevent the agent from obeying embedded instructions. - Capability inventory: None identified. The skill does not perform subprocess calls, file-system writes, or network operations in the provided file.
- Sanitization: Absent. There is no evidence of data sanitization or validation before interpolation into the generated email content.
Audit Metadata