instantly-campaigns
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts to process lead data and interact with external marketing APIs.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it interpolates user-provided descriptions and lead data into LLM prompts without explicit boundary markers.
- Ingestion points: client_description and offers variables in scripts/instantly_create_campaigns.py.
- Boundary markers: No delimiters or warnings are used in the prompt template to isolate untrusted data.
- Capability inventory: The skill can perform network POST requests to api.instantly.ai to create live email campaigns.
- Sanitization: No sanitization or escaping of input data is performed before interpolation into the prompt.
Audit Metadata