brand-voice-extractor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external URLs and local files, creating a surface for indirect prompt injection attacks.
- Ingestion points: The skill fetches content from user-provided URLs and reads from local inventory files (e.g., clients/[client]/research/content-inventory.json) as described in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent processes the fetched content.
- Capability inventory: The skill utilizes web fetching capabilities (WebFetch) to retrieve content and has the ability to read local JSON files.
- Sanitization: There is no mention of sanitizing, filtering, or escaping the external content before it is analyzed by the agent.
Audit Metadata