script-generation

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external product pages and URLs to extract product differentiators and proofs for script generation.
  • Ingestion points: External URLs and product pages provided by the user as described in the first step of the workflow in SKILL.md.
  • Boundary markers: The instructions lack explicit delimiters (e.g., XML tags or triple quotes) or specific 'ignore embedded instructions' warnings when processing these external sources.
  • Capability inventory: The skill's primary function is text generation. No dangerous capabilities such as file system writes, network exfiltration commands, or dynamic code execution were found in the provided files.
  • Sanitization: There are no instructions for sanitizing or validating the content retrieved from external URLs before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:41 AM