content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and analyzing untrusted data from external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: The SKILL.md file instructs the agent to process data from sales call transcripts, survey responses, keyword exports (Ahrefs, SEMrush, GSC), and forum content from sites like Reddit and Quora.
- Boundary markers: There are no explicit instructions or delimiters defined to protect the agent from executing instructions potentially hidden within these external datasets.
- Capability inventory: The skill is instructional and does not include scripts for automated command execution, file writing, or network operations, limiting the impact of any potential injection.
- Sanitization: The instructions do not include steps to sanitize or validate the external content before it is analyzed by the agent.
Audit Metadata