upsell-cross-sell-writer
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill's primary function is to assist in writing marketing and sales copy based on user-provided context.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because it processes untrusted user-supplied data (customer context, current plan) to generate its output. However, the risk is negligible as it lacks high-privilege capabilities and the impact is confined to the generated text.
- Ingestion points: User-provided arguments for 'current plan', 'target upgrade', and 'customer context' in SKILL.md.
- Boundary markers: None present.
- Capability inventory: The skill is restricted to Read and Write tools (SKILL.md).
- Sanitization: No explicit sanitization or filtering of external content is performed.
Audit Metadata