gtm-workflow-enrich-network
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from CSV files and third-party enrichment services. Ingestion points include CSV uploads and service-retrieved lists described in SKILL.md. No specific boundary markers or instructions to ignore embedded commands are defined for the ingested data. Capabilities include database writes and network requests performed through the gtm-workflow dependency. The skill lacks explicit sanitization for natural language data.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing necessary dependencies using npx skills add eliasstravik/gtm-skills. This command fetches resources from the author's repository and follows standard ecosystem practices.
Audit Metadata