dormant-client-reactivation
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input which is interpolated into the final prompt template.
- Ingestion points: User-provided text for past work history and reasons for outreach defined in the argument-hint (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded instructions within the user-supplied data.
- Capability inventory: The skill does not define any scripts or tools and lacks capabilities for file system access, network operations, or command execution.
- Sanitization: No sanitization or validation is applied to the user input before it is used in the prompt template.
- [NO_CODE]: The skill consists entirely of markdown instructions and prompt templates. It does not include any executable scripts, binary files, or configuration for external package managers.
- [SAFE]: External links within the documentation point to the author's official website for product information and demos, which is consistent with the skill's stated source.
Audit Metadata