optimize-newsletter
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface where user-supplied content is processed and passed to other skills for text generation.\n
- Ingestion points: User-provided outlines and rough drafts are ingested in Step 1 and Step 2 of the
SKILL.mdworkflow.\n - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when passing user content to the foundation skills (such as
creator-stack:write,creator-stack:title, andcreator-stack:hook).\n - Capability inventory: The skill is limited to text generation foundation skills and does not have access to sensitive file paths, network operations, or shell execution.\n
- Sanitization: There is no evidence of content sanitization or validation for the incoming draft content.
Audit Metadata