helix-mcp-craft-content
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from both user inputs and external web sources to generate marketing deliverables and verify facts.
- Ingestion points: Data enters the agent context through user-provided customer win metrics, social assets, and external information retrieved via
web_searchandweb_fetchas defined inreferences/operating-principles.md. - Boundary markers: The skill provides instructions to maintain deterministic accuracy and explicitly flags assumptions using an
Assumption:prefix to help differentiate between confirmed facts and AI-generated interpretations. - Capability inventory: The skill invokes specialized content tools (e.g.,
content_repurposer,case_study_generator) via a hosted MCP server and has the ability to browse the web. - Sanitization: Rule 4 in
references/operating-principles.mdestablishes a four-tier source hierarchy to prioritize authoritative primary sources and reputable research, which serves as a validation mechanism for external data. - [EXTERNAL_DOWNLOADS]: The skill relies on external infrastructure and software packages associated with the vendor.
- Evidence: The skill configuration targets a hosted MCP endpoint at
https://craft-content.gtmhelix.com/mcpand references the npm package@shashwatgtmalpha/craft-content-mcp. These resources are consistent with the identified author identity 'shashwatgtm'.
Audit Metadata