devrel-content-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to ingest and process information from untrusted external sources.
- Ingestion points: The agent is instructed in
SKILL.mdto "read the user's existing files and a documented audience profile or program strategy" to gather context for the content plan. - Boundary markers: There are no instructions for using boundary markers or delimiters to isolate content read from user files, which may allow the agent to mistake data for system instructions.
- Capability inventory: The skill's capabilities are limited to textual analysis and the generation of content plans. It does not perform network operations or execute arbitrary system commands, which limits the impact of potential injection.
- Sanitization: No sanitization or filtering logic is specified for the content ingested from external user files.
Audit Metadata