cold-email

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external data (such as LinkedIn posts, company news, and website changes) to personalize outbound emails. This creates a potential attack surface where malicious instructions could be embedded in the processed content to influence the agent's behavior.
  • Ingestion points: External research signals from LinkedIn, company news, and public websites (referenced in SKILL.md and personalization.md).
  • Boundary markers: The skill does not define technical delimiters for untrusted data, although it provides a "Quality Check" framework and instructions to avoid AI-generated patterns.
  • Capability inventory: The agent is tasked with generating email text and is instructed on how to handle replies via webhook integrations (mentioned in the Tool Integrations section).
  • Sanitization: Human review is recommended for Tier 1 and Tier 2 outreach efforts to ensure quality and relevance before sending.
  • [EXTERNAL_DOWNLOADS]: The skill contains multiple links to an external GitHub repository (coreyhaines31/marketingskills) for tool integration guides and registry information. These references are for documentation purposes and point to markdown files rather than executable scripts or packages.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 07:56 PM