brand-voice
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes external source material to extract stylistic features, which presents a surface for indirect prompt injection if the source data contains malicious instructions.\n
- Ingestion points: The skill gathers samples from X (via
x-api), articles, newsletters, emails, and website copy as defined inSKILL.md.\n - Boundary markers: The skill utilizes a structured
VOICE PROFILEblock and a specific schema inreferences/voice-profile-schema.mdto delimit the extracted data, though it lacks specific 'ignore instructions' markers for the input phase.\n - Capability inventory: The agent uses
x-apifor data collection and the resulting profile influences downstream content generation and outreach tools likecontent-engineandlead-intelligence.\n - Sanitization: No explicit sanitization or filtering of the input source material is performed before analysis.
Audit Metadata