write-outreach-reply-reader
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of prospect replies provided by the marketer, which represents an attack surface for indirect prompt injection attacks.
- Ingestion points: Reads replies that the marketer pastes or uploads (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands for the input text.
- Capability inventory: The skill updates a ledger via the outcomes-ledger skill and writes to results-working.md (SKILL.md).
- Sanitization: The skill mandates that pain phrases be anonymized and explicitly forbids including names, emails, or raw reply text in the brand brain, reducing the potential impact of malicious content (SKILL.md).
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill uses scoped internal resources to perform its tasks.
Audit Metadata