link-prospecting
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the open web to identify link prospects and draft outreach messages.
- Ingestion points: Processes content from search engine results (SERPs), competitor backlink profiles, and external web pages (e.g., contact pages, about pages, and editorial guidelines) via browsing tools.
- Boundary markers: No specific delimiters or safety instructions are defined to separate untrusted external content from the agent's internal instructions.
- Capability inventory: The skill can perform web searches, fetch page content, and update project-specific context (e.g.,
update_project_context,addKeyPages). It does not have access to sensitive system files or arbitrary shell execution. - Sanitization: No explicit sanitization or validation of the ingested web content is performed before it is used to draft outreach or update the project context.
Audit Metadata