support-executive-summary-generator
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external 'business content' and 'complex business inputs' to generate summaries, which exposes the agent to instructions embedded in that data. * Ingestion points: Input enters through provided business content during the intake and analysis phase (SKILL.md). * Boundary markers: There are no explicit delimiters or instructions for the agent to disregard commands within the input. * Capability inventory: The skill does not define dangerous capabilities such as network access, file writing, or command execution; it uses a standard wrapper script (scripts/run.sh) to invoke a platform script. * Sanitization: No sanitization or validation of the input content is defined in the instructions.
Audit Metadata