content-brief-factory

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Retrieves search engine result data and competitive insights from well-known technology services including SerpAPI, Serper.dev, DataForSEO, and ValueSERP.
  • [COMMAND_EXECUTION]: Executes shell commands to run scripts from local dependency skills, such as site-content-catalog, review-scraper, and reddit-scraper, to perform site auditing and data mining.
  • [PROMPT_INJECTION]: Ingests untrusted external content from Reddit, review platforms (G2, Capterra), and competitor websites to generate content outlines. This creates a surface for indirect prompt injection where adversarial text in the source material could potentially influence the brief's structure.
  • Ingestion points: Competitive web pages fetched via fetch_webpage, Reddit threads via scrape_reddit.py, and reviews via scrape_reviews.py.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic.
  • Capability inventory: Includes shell execution (running local Python scripts) and file system write access to the clients/ directory.
  • Sanitization: No explicit sanitization or filtering of external data is defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 03:06 PM
Security Audit — agent-trust-hub — content-brief-factory