reply-objection-handler
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, scripts, or executables were detected in the skill files. The skill relies on natural language instructions to perform its tasks.
- [SAFE]: The skill does not request or use any sensitive credentials, API keys, or private file paths.
- [SAFE]: No obfuscation techniques, hidden commands, or suspicious encoding were found.
- [SAFE]: The skill does not include any external dependencies or remote code execution patterns.
- [SAFE]: No persistence mechanisms or privilege escalation attempts were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of sales replies and conversation threads. While this represents a standard attack surface for indirect prompt injection, the risk is minimal as the skill's capabilities are limited to text classification and response generation.
- Ingestion points: External data enters the context through Step 1 in
SKILL.md(pasted replies, screenshots, and thread context). - Boundary markers: The instructions do not define specific delimiters to isolate the untrusted input from the agent's primary instructions.
- Capability inventory: The skill is restricted to generating text responses and CRM tags; it lacks capabilities for file system modification, command execution, or network exfiltration.
- Sanitization: No explicit sanitization or filtering of input data is performed.
Audit Metadata