content-strategy
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze external data such as customer transcripts and forum posts, which presents a surface for indirect prompt injection.\n
- Ingestion points: Defined in the 'Content Ideation Sources' section of
SKILL.md, including keyword exports, call transcripts, survey responses, and forum research (Reddit, Quora).\n - Boundary markers: No clear delimiters or protective instructions are specified to separate untrusted data from the agent's logic.\n
- Capability inventory: The skill performs text analysis and planning; it does not utilize high-risk tools like shell execution or file-writing tools that could be exploited.\n
- Sanitization: No input validation or sanitization measures are described for the external content.\n- [NO_CODE]: The skill package consists entirely of instructional markdown and evaluation data. No executable scripts, binaries, or software dependencies are included.
Audit Metadata