sales-enablement

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources using external search and scraping tools, which can lead to the execution of malicious instructions embedded in that data.
  • Ingestion points: The skill utilizes tavily_search and context_dev_scrape_markdown (as mapped in references/sandbase-api-map.md) to read external product, pricing, and competitor pages.
  • Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external content from the agent's primary instructions, nor warnings to ignore instructions found within that content.
  • Capability inventory: The skill calls tools via sandbase_call_tool and generates various sales assets such as decks, scripts, and proposals.
  • Sanitization: The instructions do not define any sanitization or validation logic for the content retrieved from external sources before it is incorporated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:45 AM