research
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its research phases, creating a surface for indirect prompt injection.
- Ingestion points: The skill fetches data from web searches and competitor content in
Step 2: Research Existing ContentandStep 3: Competitor Research(SKILL.md). - Boundary markers: There are no explicit instructions to use delimiters or to ignore instructions embedded within the ingested external data.
- Capability inventory: The skill uses the
Agenttool to run subagents, performs web searches, accesses platform-specific analytics tools, and reads/writes to the local file system (SKILL.md). - Sanitization: No sanitization or filtering of external content is specified before processing or document generation.
- [EXTERNAL_DOWNLOADS]: The skill provides references to several external industry blogs and marketing resources in
references/youtube-community-strategy.mdfor strategic context. - Details: The references include links to domains such as
vidiq.com,buffer.com,influencermarketinghub.com,geeky-gadgets.com,socioblend.com,air.io,socialmediatoday.com,sproutsocial.com, andhootsuite.com. These are recognized as standard industry sources for social media strategy. - [DATA_EXFILTRATION]: The skill is designed to access sensitive user metrics and platform data.
- Evidence: The skill instructions specify gathering "performance metrics", "YouTube Analytics", "email platform data", and "platform analytics" in
SKILL.md. This data is intended to be synthesized into a research document saved at a location specified by the user or orchestrator.
Audit Metadata