sales-intelligence
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources including LinkedIn, Twitter, and Google News.
- Ingestion points: Data enters the agent's context through results returned by
sandbase_call_toolfrom various external APIs (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety markers to isolate external data from the system prompt (SKILL.md).
- Capability inventory: The skill uses vendor-provided gateway tools
sandbase_describe_toolandsandbase_call_toolfor data retrieval (SKILL.md, references/sandbase-api-map.md). - Sanitization: There are no instructions for sanitizing or validating the content retrieved from external sources before it is processed by the agent.
Audit Metadata