script-generation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external product pages and URLs to extract product differentiators and proofs for script generation.
- Ingestion points: External URLs and product pages provided by the user as described in the first step of the workflow in
SKILL.md. - Boundary markers: The instructions lack explicit delimiters (e.g., XML tags or triple quotes) or specific 'ignore embedded instructions' warnings when processing these external sources.
- Capability inventory: The skill's primary function is text generation. No dangerous capabilities such as file system writes, network exfiltration commands, or dynamic code execution were found in the provided files.
- Sanitization: There are no instructions for sanitizing or validating the content retrieved from external URLs before it is processed by the agent.
Audit Metadata