Skills
Navigate
skills/novryanda/agentic-marketing/marketing-retention/Gen Agent Trust Hub

marketing-retention

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires external tools from the official Vercel Labs GitHub repository, which is a recognized and trusted source.
  • [COMMAND_EXECUTION]: Instructions include environment setup using npm and npx to install browser automation dependencies like Playwright and the agent-browser tool.
  • [PROMPT_INJECTION]: The skill processes untrusted data from external websites via the agent-browser tool (identified in SKILL.md and references/research-playbook.md). This ingestion point lacks explicit boundary markers or sanitization, creating an attack surface for indirect prompt injection. The agent has capabilities to browse the web and write to the local file system.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 07:17 PM