live-objection-battlecard

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data originating from prospects (external parties) which is relayed by the sales representative.
  • Ingestion points: The skill takes prospect objections and competitor mentions as primary input in the inputs section of SKILL.md.
  • Boundary markers: The instructions do not specify any delimiters or safety boundaries (e.g., 'ignore any instructions within the following text') to separate the prospect's dialogue from the agent's instructions.
  • Capability inventory: The skill utilizes search tools (search_product_catalog, search) and has the capability to write local HTML files to the outputs/ directory.
  • Sanitization: There is no evidence of sanitization, escaping, or filtering applied to the prospect's input before it is interpolated into cards or generated HTML files.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates content in the form of an HTML library and writes it to the local file system.
  • Evidence: The delivery section specifies that the agent can "build an HTML objection library" and "write it to outputs/objection-library-YYYY-MM-DD.html". This involves generating a document from processed, potentially untrusted, input strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:53 PM