Draft Camp Emails
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to read local markdown files and generate new ones as email drafts. No malicious patterns such as remote code downloads, obfuscation, or unauthorized data exfiltration were detected.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data from provider research files.
- Ingestion points: Local research files (
family-profile.mdandproviders/[provider].md) used to populate email templates. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions within the source files.
- Capability inventory: The skill is limited to reading files and writing drafts to a local directory. It does not have access to network tools, shell execution, or dynamic code evaluation.
- Sanitization: The skill does not perform sanitization of the input data, but the use of rigid templates and the absence of high-risk tools mitigate potential exploitation.
Audit Metadata