copywriting

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from untrusted external sources, such as competitor landing pages, Reddit threads, and customer review platforms like Trustpilot.
  • Ingestion points: skills/seo-copywriting/SKILL.md (web search results, Reddit, forums), skills/french-copywriting/SKILL.md (Trustpilot.fr, Avis Vérifiés).
  • Boundary markers: The instructions do not define specific delimiters or security guardrails for handling this external content.
  • Capability inventory: The agent has the capability to perform web searches and write to local files (e.g., .agents/tone-of-voice.md).
  • Sanitization: There are no requirements for sanitizing or escaping the data fetched from the web before it is processed by the agent.
  • [COMMAND_EXECUTION]: The skill explicitly instructs the agent to run a local Python script for validating link clusters, which involves executing code on the user's system.
  • Evidence: skills/seo-copywriting/SKILL.md contains the instruction: "Run the link_cluster_validator.py script (project-local) where available."
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 07:10 AM