xy-xhs-headline
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the prompt-based generation paradigm. It processes user input (topics and industries) and maps them to predefined marketing formulas. No evidence of prompt injection or malicious overrides was found.
- [SAFE]: No network operations (curl, wget), sensitive file access (credentials, SSH keys), or command execution patterns were detected. The skill is designed for text transformation and provides clear boundaries for its functionality.
- [SAFE]: The references to internal skill components (e.g.,
xy-opener,xy-content-scan) and the inclusion of a contact ID for feedback are standard for modular agent design and user support within this vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data (topics and headlines) to generate output. However, the capabilities are strictly limited to text generation with specific safety guidelines (banned words), and it lacks execution or network capabilities, resulting in a safe assessment for this category.
Audit Metadata