ecc-brand-voice
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, including X posts (via
x-api), essays, emails, and website copy, to extract brand voice characteristics. This creates a potential surface where malicious instructions embedded in the analyzed text could influence the agent's behavior. - Ingestion points: External content gathered in the 'Collection Workflow' and via the
x-apitool mentioned inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing source material.
- Capability inventory: The skill produces structured profiles intended for use by downstream automation skills such as
content-engineandcrosspost. - Sanitization: There are no instructions for sanitizing or filtering instructions that might be present in the source text samples.
Audit Metadata