paid-media-ops
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external ad platforms and CRM systems, creating an attack surface for indirect prompt injection.
- Ingestion points: Ad platform delivery records (Google Ads, Meta, LinkedIn), CRM objects (leads, opportunities), and third-party publisher reports as identified in
agents/paid-media-attribution-analyst.mdandagents/paid-media-conversion-signal-engineer.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill is primarily instructional and analytical, providing guidance for ad account configuration and reporting rather than providing executable scripts with high-risk capabilities.
- Sanitization: No explicit sanitization or validation of the ingested external content is described.
Audit Metadata