devrel-newsletter-program
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates primarily as a textual reasoning engine for developer relations strategy. No malicious patterns, obfuscation, or unauthorized access attempts were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions to ingest untrusted data from user-provided strategy or calendar files. (1) Ingestion points: Reads local files like devrel strategy or content calendar (SKILL.md). (2) Boundary markers: None explicitly defined for these external files. (3) Capability inventory: The skill does not have any code execution, subprocess, or network capabilities. (4) Sanitization: None specified. This ingestion surface is considered safe due to the lack of exploitable capabilities.
- [EXTERNAL_DOWNLOADS]: The documentation references multiple well-known developer services and newsletters (e.g., Stripe, GitHub, Cloudflare, Supabase) for benchmarking purposes. These are static references for context and do not represent a risk of remote code execution or unauthorized downloads.
Audit Metadata