market-ads
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it fetches and processes content from external URLs provided by the user to generate ad copy variations.
- [PROMPT_INJECTION]: Ingestion points: The target website content is fetched based on the user-provided
<url>in the/market ads <url>command defined in SKILL.md. - [PROMPT_INJECTION]: Boundary markers: The instructions lack explicit boundary markers or directions for the agent to disregard potential instructions embedded within the fetched external data.
- [PROMPT_INJECTION]: Capability inventory: The skill's capabilities are limited to generating text and writing to a local file (AD-CAMPAIGNS.md); it does not have access to sensitive credentials, system-level execution tools, or unauthorized network operations.
- [PROMPT_INJECTION]: Sanitization: No sanitization, filtering, or validation mechanisms are specified for the content retrieved from external sites before it is incorporated into the prompt context.
Audit Metadata