marketing-loops
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a broad attack surface for indirect prompt injection as it is designed to ingest and process data from various untrusted external environments.\n
- Ingestion points: The loops defined in
references/loop-catalog.mdingest data from the open web, news sites (e.g., HN, Reddit), social media platforms (X), community platforms (Slack, Discord), and customer feedback channels (reviews, support tickets, NPS).\n - Boundary markers: There are no explicit instructions to use boundary markers or delimiters when interpolating this untrusted data into prompts.\n
- Capability inventory: The skill orchestrates multiple tools and other skills to draft outbound communications such as emails, social posts, and PR pitches. It also manages state by writing to files in the
.agents/loops/directory.\n - Sanitization: The skill addresses this risk by mandating human approval for all 'Gated' actions (Tier 2), such as sending messages or publishing content, as outlined in
references/loop-guardrails.md.\n- [PERSISTENCE]: The skill instructions facilitate persistence by guiding the user to schedule recurring agent tasks.\n - Evidence: In
SKILL.md, the 'Scheduling a loop' section details how to use platform-specific scheduling commands such asCronCreateandScheduleWakeupto ensure marketing workflows execute automatically on a set cadence.
Audit Metadata