campaign-planner
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection as it ingests and processes untrusted user data.
- Ingestion points: User inputs for brand, campaign goals, budget, and audience targets as defined in
SKILL.md. - Boundary markers: The skill lacks explicit delimiters or instructions for the agent to ignore potentially malicious commands embedded within user input.
- Capability inventory: The skill is configured with
ReadandWritetool access (SKILL.md), which could be misused if an injection occurs. - Sanitization: No evidence of input validation, escaping, or sanitization logic is present in the skill instructions.
Audit Metadata