sales-ai-assistant
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest various forms of potentially untrusted data which could contain malicious instructions.
- Ingestion points: Several files, including SKILL.md, references/analytics.md, and references/competitive.md, direct the agent to analyze sales metrics, CRM exports, and public customer feedback from websites like Reddit and G2.
- Boundary markers: While the templates use structural headers (e.g., 'Background information', 'Data input'), they do not include explicit instructions to ignore or escape any commands that might be embedded within the ingested data.
- Capability inventory: The skill allows the agent to generate a wide range of content, including client emails, strategic account plans, and performance reports.
- Sanitization: The instructions do not define any validation, filtering, or sanitization processes for external content before it is interpolated into the generation prompts.
Audit Metadata