pitch-lensing
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed to research external sources such as podcasts and blog posts, and to review existing pitch deck content provided by the user (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore malicious instructions that might be embedded within the data being processed.
- Capability inventory: The skill does not include any custom scripts, file-system writes, or network commands; it provides structured instructions for the agent to follow using its existing toolset.
- Sanitization: There are no provided mechanisms for sanitizing or filtering input gathered from external sources.
Audit Metadata