ad-to-landing-page-auditor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and analyze external landing pages and ad copy, creating an attack surface where malicious instructions embedded in those pages could influence agent behavior.
- Ingestion points: External data enters the agent context via the
fetch_webpagetool (landing pages) and via CSV/manual input (ad copy) as described in Phase 0 and Phase 2. - Boundary markers: The skill lacks explicit boundary markers or instructions to the agent to ignore potentially malicious directions found within the fetched webpage content.
- Capability inventory: The skill possesses file-writing capabilities, specifically saving audit reports to the local file system (
clients/<client-name>/ads/...). - Sanitization: There is no evidence of sanitization or filtering of the external content before it is processed for the audit scoring.
Audit Metadata