designing-email-templates
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and modifies email template designs fetched from an external source, creating a vulnerability surface for instructions embedded in data.
- Ingestion points: Template data is retrieved from the PostHog platform using the
workflows-get-email-templatetool inSKILL.md. - Boundary markers: The skill instructions do not specify any delimiters or safety markers to differentiate between template content and instructions for the agent.
- Capability inventory: The skill possesses the ability to write/update templates via
workflows-update-email-templateand generate rendered HTML previews usingworkflows-show-email-templateas described inSKILL.md. - Sanitization: There is no evidence of sanitization, validation, or filtering of the fetched content to prevent the execution of embedded prompts.
Audit Metadata