mailchimp-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external sources and user inputs.
- Ingestion points: Data is ingested via
MAILCHIMP_SET_CAMPAIGN_CONTENT(HTML content) and retrieved from external Mailchimp APIs through tools likeMAILCHIMP_LIST_MEMBERS_INFOandMAILCHIMP_GET_CAMPAIGN_REPORT. - Boundary markers: There are no explicit instructions or delimiters defined to isolate retrieved data or user-provided HTML from the agent's core instructions.
- Capability inventory: The skill possesses the capability to perform network-based actions, specifically sending email campaigns (
MAILCHIMP_SEND_CAMPAIGN) and modifying audience data. - Sanitization: The instructions do not specify any sanitization, filtering, or validation logic for the content processed by the tools.
Audit Metadata