content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data sources, including keyword exports, customer call transcripts, survey responses, and content from public forums like Reddit and Quora.
- Ingestion points: Instructions in
SKILL.md(section "Content Ideation Sources") direct the agent to analyze external files and web content provided by the user or found via search. - Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings to prevent the agent from following malicious commands hidden within the ingested data.
- Capability inventory: The skill guides the agent's high-level planning and decision-making processes, which can be influenced by malicious instructions in the input data.
- Sanitization: There are no instructions for sanitizing, filtering, or validating the content of transcripts or forum posts before they are processed by the agent.
Audit Metadata