content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from untrusted external sources, which could contain malicious instructions intended to influence the agent's behavior.
- Ingestion points:
SKILL.md(Step 6) instructs the agent to perform web searches on sites like Reddit and Quora, analyze competitor blogs, and process user-provided call transcripts. - Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded instructions within the retrieved external content.
- Capability inventory: The skill utilizes web search capabilities and file reading (for transcripts) to gather context for the strategy.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the content retrieved from external URLs or provided transcripts before processing.
Audit Metadata