brand-brain-schema
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize data from untrusted external sources, which creates a surface for indirect prompt injection attacks where malicious instructions hidden in data could influence the agent.
- Ingestion points: Data is ingested from the
raw/customers/directory, which specifically includes content from Reddit threads, Amazon Q&A, and customer reviews. It also processes content from theraw/notes/directory. - Boundary markers: The instructions do not specify the use of delimiters or clear boundaries to distinguish between the agent's instructions and the content being read from raw files during the synthesis process.
- Capability inventory: The skill reads files from the local filesystem, performs synthesis (processing) of that data, and writes the resulting articles and answers to the
wiki/andoutputs/directories. - Sanitization: There are no explicit requirements or steps for the agent to sanitize, escape, or filter the raw content before it is incorporated into the synthesized wiki articles or output reports.
Audit Metadata