sourcing-outreach
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of purely instructional markdown content for recruitment tasks. No scripts, executable code, or unauthorized data access patterns were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to research and incorporate external candidate information (LinkedIn, blogs, open-source work), creating a theoretical surface for indirect prompt injection.
- Ingestion points: Candidate background information provided by the user or researched from external sources (SKILL.md).
- Boundary markers: The skill does not specify the use of delimiters or boundary markers to isolate untrusted external content from system instructions.
- Capability inventory: The skill's functionality is limited to text generation and does not utilize high-risk tools, shell commands, or file system modifications.
- Sanitization: No explicit sanitization or filtering instructions are provided for handling data from external sources.
Audit Metadata