research-digest
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from various external sources which could contain malicious instructions designed to manipulate the agent's behavior.
- Ingestion points: The workflow in
SKILL.mdspecifies gathering material from RSS feeds, web search, industry reports, and social media (Reddit, Twitter/X, LinkedIn). - Boundary markers: Absent. The instructions do not provide delimiters or specific commands for the agent to ignore embedded instructions within the retrieved web content.
- Capability inventory: The skill possesses network read capabilities to fetch external data and file write capabilities to produce the research brief.
- Sanitization: Absent. There is no mention of filtering or escaping content from external sources before it is processed by the LLM.
- [EXTERNAL_DOWNLOADS]: The installation instructions in
SKILL.mdinvolve downloading the skill package from the author's public repository. - Evidence:
git clone https://github.com/thatrebeccarae/claude-marketing.gitinSKILL.mdfetches resources from the vendor's own infrastructure.
Audit Metadata