copychief
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources such as user messages and Google Docs to perform copywriting reviews.
- Ingestion points: Processes marketing copy, VSL scripts, emails, and document content provided by the user (SKILL.md).
- Boundary markers: The skill lacks specific delimiters or 'ignore embedded instructions' warnings for the data it reviews to prevent it from being interpreted as instructions.
- Capability inventory: The skill does not currently define usage of sensitive tools, file-system writes, or network operations, which limits the potential impact of an injection attack.
- Sanitization: No input validation, escaping, or sanitization routines are specified for the ingested content.
Audit Metadata