objection-pattern-detector
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze external, untrusted data (lost and won deal notes), which provides a surface for indirect prompt injection attacks where malicious instructions hidden in the notes could influence the agent's behavior. * Ingestion points: Sales deal notes provided via user input or retrieved from external CRM data as described in the instructions of SKILL.md. * Boundary markers: The instructions lack explicit delimiters (such as XML tags or triple quotes) or instructions for the agent to ignore any commands potentially embedded within the deal notes. * Capability inventory: The skill relies on natural language reasoning and does not include its own scripts or tools in the provided file. * Sanitization: There are no instructions to sanitize or validate the content of the notes before processing.
Audit Metadata