trigger-event-detection
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture is designed to ingest and process data from external sources (e.g., LinkedIn, Crunchbase, news alerts).
- Ingestion points: Data enters the system via various APIs and web scraping sources defined in
TRIGGER_SOURCESwithinSKILL.md. - Boundary markers: The message generation templates in
TRIGGER_MESSAGESdo not include delimiters or specific instructions to prevent the agent from following instructions potentially embedded in the external event data. - Capability inventory: The skill outlines capabilities for generating and sending automated messages (
queue_triggered_outreach) and alerting personnel (notify_rep). - Sanitization: The provided Python snippets do not demonstrate sanitization or validation of external data before it is interpolated into message templates.
Audit Metadata