newsletter-research
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: The skill ingests content from external websites and WeChat articles via the
exa_search,tavily_search, andwechat_mp_v2_account_articlestools defined inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or clear separation markers to distinguish between external data and system instructions.
- Capability inventory: The skill calls research-oriented tools via a gateway and synthesizes findings; it does not possess capabilities for file writing, network exfiltration of sensitive data, or shell command execution.
- Sanitization: The skill lacks explicit instructions for sanitizing or validating external content before it is processed by the agent.
Audit Metadata