cold-outreach

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No instructions were found that attempt to override agent behavior, bypass safety filters, or extract system prompts. The instructions focus entirely on creative writing guidelines for email outreach.
  • [DATA_EXFILTRATION]: The skill does not contain any hardcoded credentials, sensitive file paths, or network operations (curl, wget, etc.). It suggests saving output to a local markdown file, which is a standard document generation task.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts, nor does it specify any external dependencies or package installations.
  • [COMMAND_EXECUTION]: The skill does not invoke any shell commands, subprocesses, or administrative operations.
  • [OBFUSCATION]: Analysis of the text content found no Base64 encoding, zero-width characters, homoglyphs, or hidden URL patterns.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not use the dynamic context execution syntax (!command) to run shell commands at load time.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted user input to draft emails, the attack surface is limited to generating text for a human recipient. There are no exploitable capabilities like network requests or executable code generation that could be triggered via malicious input.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 09:49 PM