sales-influencer-marketing
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by directing the agent to ingest and process data from untrusted or external sources.
- Ingestion points: The agent is instructed to use
WebFetchto retrieve remoteSKILL.mdfiles fromgithub.com/sales-skills/salesand useReadto access skill metadata in~/.claude/skills/. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent processes the retrieved external content.
- Capability inventory: The skill environment includes file read/write access (specifically to
references/learnings.md) and network access viaWebFetch. - Sanitization: There is no evidence of sanitization, validation, or escaping of the content fetched from remote URLs or local skill directories before it is used to influence the agent's recommendations.
Audit Metadata