planning-content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze data from untrusted external sources, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The skill processes keyword exports (Ahrefs/SEMrush/GSC), customer call transcripts, survey responses, and content from external sites like Reddit, Quora, and competitor blogs via web search.\n
- Boundary markers: There are no instructions provided to the agent to treat this external content as untrusted or to ignore embedded instructions (e.g., within transcripts or scraped web content).\n
- Capability inventory: The skill relies on the agent's ability to read local files (e.g.,
.claude/product-marketing-context.md), process user-provided documents, and perform web searches to gather information.\n - Sanitization: No sanitization, escaping, or validation steps are defined for the information extracted from these external sources before it is used to generate strategy recommendations.
Audit Metadata