email-outreach-prep
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as web search results and professional profiles. While this is the intended functionality, it creates a surface for indirect prompt injection if those sources contain malicious instructions.\n
- Ingestion points: External data enters the context through tools like
tavily_searchandlinkedin_web_v2_user_profileas listed inSKILL.mdandreferences/sandbase-api-map.md.\n - Boundary markers: The skill instructions do not specify the use of delimiters or clear separation markers (e.g., XML tags) to isolate external content from the agent's core instructions.\n
- Capability inventory: The skill has the ability to call various enrichment and validation tools through the
sandbase_call_toolinterface.\n - Sanitization: No explicit content filtering or sanitization steps are defined for the data retrieved from external platforms.
Audit Metadata