sales-influencer-marketing

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by directing the agent to ingest and process data from untrusted or external sources.
  • Ingestion points: The agent is instructed to use WebFetch to retrieve remote SKILL.md files from github.com/sales-skills/sales and use Read to access skill metadata in ~/.claude/skills/.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent processes the retrieved external content.
  • Capability inventory: The skill environment includes file read/write access (specifically to references/learnings.md) and network access via WebFetch.
  • Sanitization: There is no evidence of sanitization, validation, or escaping of the content fetched from remote URLs or local skill directories before it is used to influence the agent's recommendations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 11:08 PM