gamma-data-handling
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied content and prompts to generate presentations, which presents a surface for indirect prompt injection.
- Ingestion points:
userContentis ingested insrc/gamma/sanitize.tsandsrc/gamma/exports.ts(SKILL.md). - Boundary markers: The skill does not explicitly define delimiters for user input, though it provides sanitization logic.
- Capability inventory: The code snippets include file writing via
node:fs/promisesand network operations viafetchand@aws-sdk/client-s3(SKILL.md). - Sanitization: The skill provides a
sanitizeContentfunction that uses regex to mask emails and phone numbers before data is sent to the Gamma API.
Audit Metadata