content-strategy
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from multiple external sources, creating an attack surface for indirect prompt injection.
- Ingestion points: Per
SKILL.md, the agent is instructed to analyze user-provided data including sales/customer call transcripts, survey responses, and keyword exports. It also utilizes web search results from platforms like Reddit, Quora, and competitor blogs. - Boundary markers: The skill lacks explicit instructions or delimiters to distinguish these untrusted inputs from the agent's core behavioral instructions.
- Capability inventory: The skill primarily generates text-based strategies and does not contain subprocess calls, direct file-write operations, or hardcoded network requests; however, its analytical output is influenced by external data.
- Sanitization: No sanitization, validation, or escaping procedures are defined for the external content before it enters the agent's context.
Audit Metadata