paw-mkt-content
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources such as Google search results, Reddit threads, and Quora questions to perform market research and content ideation. This creates an attack surface where malicious instructions embedded in web content could influence the agent's behavior. Ingestion points: The
references/content-research.mdfile utilizes theagent-browsertool to extract text from external URLs. Boundary markers: No specific delimiters are used to isolate untrusted web text within the prompt instructions. Capability inventory: The skill possesses file-write capabilities inSKILL.mdand network access inreferences/content-research.md. Sanitization: Thereferences/frameworks/ai-content-workflow.mdprescribes a mandatory human review phase to check for hallucinations and maintain quality control. - [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of the
agent-browsertool from the official Vercel Labs GitHub repository. While this involves executing external code, the source is a verified and trusted organization, making this operation a safe dependency for the skill's functionality.
Audit Metadata