rcs-agent-onboarding
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were found. The skill operates within the expected scope of the Sent messaging platform for customer onboarding.
- [EXTERNAL_DOWNLOADS]: The skill and its references point to official documentation from Sent (docs.sent.dm) and Google (developers.google.com). These are recognized as well-known and trusted domains within the context of the service provided.
- [PROMPT_INJECTION]: The skill establishes a workflow where the agent ingests brand-related data and message examples from the user for launch preparation.
- Ingestion points: Brand identity details, opt-in evidence, and sample messages collected from the user (SKILL.md).
- Boundary markers: Not explicitly defined for the interpolation of user-provided content.
- Capability inventory: Uses the Sent API for message operations, including POST /v3/messages and GET /v3/messages (SKILL.md).
- Sanitization: Not explicitly mentioned in the workflow instructions.
Audit Metadata