teams-channel-post-writer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and research data from external sources such as official documentation and changelogs. This creates a potential surface for indirect prompt injection if the external sources contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Researching external documentation and changelogs (SKILL.md, Step 1).
- Boundary markers: The workflow does not explicitly define delimiters or instructions for the agent to ignore potentially malicious embedded content within the research sources.
- Capability inventory: The skill involves writing the resulting content to the local file system (SKILL.md, Step 5).
- Sanitization: There are no specific sanitization or validation steps mentioned for the data retrieved during the research phase.
Audit Metadata