viral-content-predictor
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted content from PDF and DOCX files provided by the user to extract and analyze medical education ideas.
- Ingestion points: Files are ingested and processed as described in the Workflow (Phase 1) in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing the extracted text.
- Capability inventory: The agent has access to
web_searchand executes a local Python script (scripts/analyze_content_ideas.py) to calculate scores. - Sanitization: There is no evidence of sanitization or filtering of the content extracted from the documents before it is used to drive the analysis or research phases.
Audit Metadata