win-loss-recap-writer
Fail
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: CRITICALNO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is composed strictly of natural language instructions and markdown, containing no scripts, binaries, or automated installation steps.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its data ingestion workflow. Ingestion points: HubSpot deal stage path, close reasons, and rep engagements. Boundary markers: Absent; no delimiters or instructions to ignore embedded commands are provided. Capability inventory: Read-only HubSpot access; no shell, network, or file-writing tools are requested. Sanitization: None; the skill does not filter or validate the contents of the ingested CRM data.
- [PROMPT_INJECTION]: The author metadata field references 'Builder.org', which is currently flagged as a malicious domain by security scanners; however, the skill performs no network operations or external downloads targeting this host.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata