before-after-and-transformation
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from client testimonials and social proof data, creating a potential surface for indirect prompt injection where malicious instructions could be embedded in the source material.
- Ingestion points: The skill reads external data from
brand-profile,social-proof-and-testimonials, anddata-and-original-researchas specified in theSKILL.mdandreferences/scope-and-connections.mdfiles. - Boundary markers: The instructions do not define boundary markers (such as XML tags or delimiters) or include specific prompts to ignore embedded instructions within the processed content.
- Capability inventory: The skill is restricted to structuring content, defining visuals, and routing output to other components or the
WoopSocialpublishing tool. No high-risk capabilities like arbitrary command execution, network exfiltration of sensitive files, or direct file-system writes were detected. - Sanitization: There are no explicit instructions for the agent to sanitize, escape, or validate the ingested data before it is interpolated into the final content output.
Audit Metadata