skills/reason-machines/marketing-skills/marketing-pipeline-ai-content-automation/Gen Agent Trust Hub
marketing-pipeline-ai-content-automation
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill implements a web crawling module (
autoResearch) that ingests content from third-party platforms such as TechCrunch, Twitter, and LinkedIn. This untrusted data is subsequently passed to Large Language Models in thegenerateContentfunction. This configuration creates an indirect prompt injection surface where adversarial content on the target websites could attempt to influence the agent's behavior. - Ingestion points:
src/lib/research/crawler.ts(fetches content from external domains). - Boundary markers: The provided code snippets do not demonstrate the use of delimiters or specific instructions to the LLM to ignore embedded commands within the research context.
- Capability inventory: The skill includes filesystem write operations via
src/lib/video/renderer.tsand network publishing capabilities viasrc/lib/publishing/auto-post.ts. - Sanitization: No explicit sanitization or filtering of the crawled data is shown in the integration examples.
Audit Metadata