work-with-creators-rate-and-deal
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources, which presents a surface for indirect prompt injection.
- Ingestion points: Reads data from external creator media kits and advertise pages found online.
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the ingested data.
- Capability inventory: The skill primarily performs calculations and writes variables; it does not contain subprocess calls, network exfiltration commands, or file system modifications.
- Sanitization: No specific sanitization or filtering of the external data is mentioned in the instructions.
Audit Metadata