marketing-email
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads research tools from Vercel Labs' GitHub repository to enable website auditing features.
- [REMOTE_CODE_EXECUTION]: Recommends the use of 'npx skills add' to install an external browser skill for research.
- [COMMAND_EXECUTION]: Instructions include executing shell commands to install npm packages and Playwright drivers.
- [PROMPT_INJECTION]: The 'Live Website URL Audit' feature ingests untrusted data from external websites into the agent context (evidence in 'references/shared-patterns.md'). While no boundary markers or sanitization are specified, the skill's primary capability is writing marketing copy to the brand workspace, presenting a low risk for indirect prompt injection.
Audit Metadata