raffle-winner-picker
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and processing data from external sources provided by users, which can contain hidden or malicious instructions.
- Ingestion points: The skill instructions explicitly encourage the agent to process data from user-supplied Google Sheet URLs and local files (e.g., CSV and XLSX files).
- Boundary markers: There are no explicit instructions or delimiters defined to separate the data content from the agent's instructions, nor are there commands to ignore embedded instructions within the ingested data.
- Capability inventory: The skill relies on capabilities to read file contents and access external web services (Google Sheets integration).
- Sanitization: No sanitization or validation logic is specified to filter out natural language instructions that might be embedded in spreadsheet cells or CSV rows.
Audit Metadata