marketing-council
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates a 'live research pass' that ingest data from external web sources and video transcripts to update its advisor simulations. This functionality introduces an inherent surface for indirect prompt injection, where maliciously crafted external content could attempt to subvert the agent's instructions.
- Ingestion points: External web search results, YouTube transcripts (via optional
watch-videoskill), and user-provided marketing questions defined in SKILL.md. - Boundary markers: The skill requires the agent to explicitly label sessions as simulations and provides 'Grounding rules' in SKILL.md to maintain persona fidelity and prevent unauthorized assertions.
- Capability inventory: The skill depends on separate research and video analysis tools for external access; it contains no native logic for shell execution, file system modification, or unauthorized network operations within the provided files.
- Sanitization: The instructions emphasize the use of primary sources and verification but do not describe specific automated sanitization or filtering of fetched data.
- [EXTERNAL_DOWNLOADS]: The skill references and suggests the use of external helper skills and documentation hosted on public code repositories to fulfill its research requirements.
- Evidence: Mentions of the
web-researchskill in theQuegenx/agent-skillsrepository and the original source repositorycoreyhaines31/marketingskillsin SKILL.md.
Audit Metadata