report-distribution-agent
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define a workflow where the agent ingests sales data from a 'Data Consolidation Agent' and distributes it via HTML email. This creates a surface for indirect prompt injection if the source data contains malicious instructions that the agent might interpret as its own commands.
- Ingestion points: Consolidated sales reports and territory parameters retrieved via the Data Consolidation Agent (SKILL.md).
- Boundary markers: No specific delimiters or instructions to 'ignore embedded instructions' are defined for handling the ingested report data.
- Capability inventory: SMTP email transmission and HTML report formatting (Workflow Process).
- Sanitization: No explicit instructions for sanitizing or escaping the content before email distribution are provided.
- [NO_CODE]: The skill consists entirely of markdown instructions and YAML metadata. It does not include any executable scripts, binaries, or configuration files that could hide malicious logic.
Audit Metadata