reply-objection-handler
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as prospect replies from email or LinkedIn threads, which presents an indirect prompt injection surface.
- Ingestion points: In SKILL.md, Step 1 instructions direct the agent to extract thread content from pasted text or screenshots.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing the extracted text.
- Capability inventory: The skill is primarily focused on text generation and does not have capabilities for subprocess execution, file-system writes, or unauthorized network operations.
- Sanitization: There are no requirements to sanitize or validate the external content before it is processed by the agent.
Audit Metadata