content-brief
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and analyzes the content of the top-ranking web pages for a target keyword to inform the content brief. This ingestion of untrusted external data creates a surface for indirect prompt injection, where an attacker-controlled website could include hidden instructions to manipulate the agent's output.
- Ingestion points: External web pages fetched and skimmed in Step 2 of the workflow.
- Boundary markers: None specified to separate external content from internal instructions.
- Capability inventory: The skill has access to Google Ads and Google Search Console data via the Ryze MCP connector.
- Sanitization: The instructions do not specify sanitization or filtering methods for the content retrieved from search results.
- [EXTERNAL_DOWNLOADS]: The skill references and requires the installation of a remote MCP connector hosted at
https://connector.get-ryze.ai/mcp. This is a vendor-owned resource necessary for the skill to interact with the Google Ads and Search Console APIs.
Audit Metadata