content-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by instructing the agent to process data from external, untrusted sources. \n
- Ingestion points: The agent is directed to analyze sales transcripts, survey data, keyword exports, and web search results from platforms like Reddit and Quora (SKILL.md). \n
- Capability inventory: The skill utilizes file reading and web searching to gather data for analysis. \n
- Boundary markers: Instructions do not specify the use of delimiters or 'ignore' directives when handling external text. \n
- Sanitization: There is no mention of sanitizing or validating the content retrieved from external sources before the agent incorporates it into its strategy recommendations.
Audit Metadata