cultural-intelligence-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external product requirements, UI code, and creative prompts during its audit phases. This processing of untrusted content introduces a surface for indirect prompt injection, where an attacker could attempt to influence the agent's behavior by embedding malicious instructions within the data being audited. However, the risk is assessed as safe given the skill's limited scope of generating reports and its lack of high-risk tools or system-level access.
- Ingestion points: Reviewing user-provided code, copy, prompts, and design systems in Phase 1 and 2.
- Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to ignore embedded instructions in analyzed data.
- Capability inventory: The skill produces checklists, briefs, and copy alternatives. It does not utilize tools for network exfiltration or direct code execution.
- Sanitization: No sanitization or input validation logic is specified in the skill body.
Audit Metadata