content-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data sources such as keyword exports, sales call transcripts, survey responses, and forum posts (e.g., Reddit, Quora). This represents a potential surface for indirect prompt injection, as malicious instructions could be embedded in these data sources. However, this functionality is essential to the skill's role as a strategic planning tool.
- Ingestion points: Sections for Keyword Data, Call Transcripts, Survey Responses, and Forum Research in
SKILL.mddefine where external data enters the agent context. - Boundary markers: The instructions do not prescribe specific delimiters or instruction-isolation markers for processing these external inputs.
- Capability inventory: The skill performs analytical tasks and planning; it references other skills (e.g.,
copywriting,seo-audit,social) for tactical execution. - Sanitization: No explicit sanitization or validation steps are defined for the analyzed external content.
Audit Metadata