editing-copy
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided marketing copy, which represents an untrusted data source. While this creates a potential surface for indirect prompt injection, the skill's capabilities are limited to text analysis and recommendation, posing minimal risk.
- Ingestion points: External marketing copy provided by the user for review in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters to isolate the source text from the agent's instructions.
- Capability inventory: The skill is restricted to text processing and providing feedback; it does not request network access or the ability to execute shell commands.
- Sanitization: No sanitization or filtering of the input copy is implemented.
Audit Metadata