content-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by instructing the agent to ingest and analyze data from untrusted external environments. * Ingestion points: Web search results from forums (Reddit, Quora), competitor websites, and user-provided external files like call transcripts or survey data as described in the 'Content Ideation Sources' section of SKILL.md. * Boundary markers: The instructions do not define boundary markers (such as XML tags or unique delimiters) to separate external data from agent instructions, nor do they include warnings to ignore instructions found within that data. * Capability inventory: While the skill itself does not explicitly define subprocess or file-write capabilities, it is designed for use within an agent environment that processes user data. * Sanitization: No sanitization, escaping, or validation steps are prescribed for the retrieved content before it is processed by the agent.
Audit Metadata