sales-enablement
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources using external search and scraping tools, which can lead to the execution of malicious instructions embedded in that data.
- Ingestion points: The skill utilizes
tavily_searchandcontext_dev_scrape_markdown(as mapped inreferences/sandbase-api-map.md) to read external product, pricing, and competitor pages. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external content from the agent's primary instructions, nor warnings to ignore instructions found within that content.
- Capability inventory: The skill calls tools via
sandbase_call_tooland generates various sales assets such as decks, scripts, and proposals. - Sanitization: The instructions do not define any sanitization or validation logic for the content retrieved from external sources before it is incorporated into the agent's context.
Audit Metadata