copywriting
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from untrusted external sources, such as competitor landing pages, Reddit threads, and customer review platforms like Trustpilot.
- Ingestion points:
skills/seo-copywriting/SKILL.md(web search results, Reddit, forums),skills/french-copywriting/SKILL.md(Trustpilot.fr, Avis Vérifiés). - Boundary markers: The instructions do not define specific delimiters or security guardrails for handling this external content.
- Capability inventory: The agent has the capability to perform web searches and write to local files (e.g.,
.agents/tone-of-voice.md). - Sanitization: There are no requirements for sanitizing or escaping the data fetched from the web before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill explicitly instructs the agent to run a local Python script for validating link clusters, which involves executing code on the user's system.
- Evidence:
skills/seo-copywriting/SKILL.mdcontains the instruction: "Run thelink_cluster_validator.pyscript (project-local) where available."
Audit Metadata