content-strategy
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, which creates a surface for indirect prompt injection. If the analyzed data contains malicious instructions, they could influence the agent's behavior.
- Ingestion points: The skill instructs the agent to process sales/customer call transcripts, keyword data exports (Ahrefs, SEMrush, GSC), survey responses, and search results from forums like Reddit and Quora.
- Boundary markers: There are no explicit instructions to use delimiters or to disregard embedded commands within the analyzed data (e.g., in
SKILL.mdsection 'Content Ideation Sources'). - Capability inventory: The skill utilizes the agent's analysis, reasoning, and web search capabilities across all files.
- Sanitization: No sanitization or validation logic is specified for the external data inputs.
Audit Metadata