lifecycle-drips

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is a template-driven framework for marketing automation design. All included files are instructional markdown, configuration references, or simple validation scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied business requirements to generate marketing documentation. The validator script (scripts/check-output.py) reads these generated files to ensure they meet quality standards. While this creates a surface for indirect instructions within the generated content, the script's logic is limited to keyword presence and length validation, and no dangerous tools (like network or privileged file access) are available for exploitation through this vector.
  • [EXTERNAL_DOWNLOADS]: The documentation references several external URLs for metrics and framework definitions. These URLs all target the author's official GitHub repository (LeadMagic/gtm-skills) or well-known services (HubSpot, Customer.io), which is consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 12:53 PM