raffle-winner-picker
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process data from external, potentially untrusted sources.
- Ingestion points: Data is loaded from user-provided Google Sheets via URL and local files like
entries.csvorcontest-entries.xlsx. - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to ignore instructions that might be embedded within the spreadsheet data.
- Capability inventory: The skill uses data processing and random selection logic, potentially involving Python execution (as indicated by the
python-developmentrelated skill) to handle the data. - Sanitization: There is no mention of sanitizing or validating the content of the ingested files to prevent malicious strings from influencing the agent's behavior during the selection process.
Audit Metadata