executing-marketing-campaigns

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides marketing frameworks and templates in markdown format, which do not contain executable code or malicious instructions.
  • [SAFE]: The Python utility script scripts/marketing_utils.py uses only standard library modules (argparse, csv, urllib.parse) for string and URL manipulation. It does not perform network operations, access sensitive system files, or use dangerous functions like eval() or exec().
  • [SAFE]: No evidence of prompt injection, obfuscation, privilege escalation, or persistence mechanisms was found.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it processes user-provided CSV files via the batch action in scripts/marketing_utils.py. Ingestion points: scripts/marketing_utils.py (via CSV batch processing). Boundary markers: Absent. Capability inventory: Local Python execution and CSV file operations. Sanitization: Input validation for alphanumeric characters in the UTM parameter generation function.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 12:22 PM
Security Audit — agent-trust-hub — executing-marketing-campaigns