lookalike-customer-finder
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting and analyzing data from external, untrusted sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The workflow in
SKILL.mdandreferences/data-sources.mdinvolves pulling data from external news, social media, and third-party enrichment services. - Boundary markers: There are no clear delimiters or instructions in the
references/output-template.mdto isolate external data from the agent's primary instructions. - Capability inventory: The skill uses the ingested data to build profiles, calculate similarity scores, and generate outreach strategies across all files.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the content retrieved from external tools.
- [NO_CODE]: The skill is composed exclusively of Markdown documentation and templates. It does not include any scripts (Python, JavaScript, shell) or compiled binaries.
Audit Metadata