campaign-copywriting
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, including website URLs and client documents, to generate email copy and campaign configurations.
- Ingestion points: Website content research and campaign strategy documents are used as primary inputs in Step 1.
- Boundary markers: The instructions lack explicit boundary markers or warnings for the agent to ignore instructions embedded within the external data.
- Capability inventory: The skill writes a
variants.yamlfile to the local file system and invokes the/smartlead-campaign-upload-publictool to initiate campaign uploads. - Sanitization: There is no evidence of sanitization or validation of the ingested data to prevent embedded instructions from altering the agent's behavior.
- [COMMAND_EXECUTION]: The skill is designed to interact with and trigger other agent tools and skills.
- Evidence: The skill explicitly instructs the agent to run
/spam-word-checkerand/smartlead-campaign-upload-publicas part of its operational flow. - Evidence: The skill references other integration tools like
/prospeo-full-exportand/disco-likefor list-building workflows.
Audit Metadata