content-strategy
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes a workflow for analyzing untrusted external data, which presents a surface for indirect prompt injection.
- Ingestion points: The skill explicitly instructs the agent to process keyword exports (Ahrefs, SEMrush, GSC), sales/customer call transcripts, survey data, and forum content from Reddit and Quora as described in the "Content Ideation Sources" section of SKILL.md.
- Boundary markers: The instructions lack explicit requirements for the agent to use boundary markers or delimiters to isolate untrusted content from the system prompt.
- Capability inventory: The skill utilizes data analysis and web search capabilities to synthesize these external inputs into a content strategy.
- Sanitization: There are no instructions for sanitizing or validating the content extracted from external transcripts or forum posts before processing.
- [SAFE]: The skill accesses local project context files such as .agents/product-marketing.md to provide tailored advice, which is standard behavior for project-aware agents.
- [SAFE]: References to external services like Sanity, Contentful, and Strapi in the headless CMS guide are to well-known technology providers and are used for legitimate technical documentation purposes.
Audit Metadata