event-sponsor-value-proposition
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The content is purely instructional and follows community standards for event organization. All external resources referenced trace back to the same vendor's infrastructure and represent normal multi-skill coordination.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes external event and sponsor data. 1. Ingestion points: Data enters the agent context via user-provided answers to the 'Interview' questions described in SKILL.md. 2. Boundary markers: The instructions do not define specific delimiters or guardrails to separate user-provided data from system instructions. 3. Capability inventory: The skill has no high-risk capabilities such as subprocess execution, network operations, or file-system modifications; it primarily generates text and suggests recording data if the platform harness supports persistent memory. 4. Sanitization: There is no evidence of input validation or sanitization for the data processed during the workflow.
Audit Metadata