content-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by ingesting and processing untrusted external data.
- Ingestion points: The skill is designed to process user-provided customer call transcripts, survey responses, and keyword exports. It also instructs the agent to perform web searches on platforms like Reddit and Quora to find content ideas (specified in
SKILL.md). - Boundary markers: There are no explicit instructions or delimiters (e.g., XML tags or clear 'ignore embedded instructions' warnings) provided to the agent for handling the content of these ingested files or search results.
- Capability inventory: The skill is focused on content planning and strategy. It lacks dangerous capabilities such as arbitrary code execution (
eval/exec), filesystem modifications, or outbound network requests beyond standard search tools. - Sanitization: There is no logic for sanitizing or validating the content of external data before it is processed by the agent.
Audit Metadata