skill-brand-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a vulnerability surface by processing untrusted data from external social media platforms.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: In Phase 1, Step 2, the skill uses the WebFetch tool to crawl social media links (e.g., Douyin, Weibo, Bilibili) provided by the user.
- [INDIRECT_PROMPT_INJECTION]: Boundary markers: The instructions lack explicit delimiters or safety warnings to ensure the agent ignores instructions found within the fetched social media content.
- [INDIRECT_PROMPT_INJECTION]: Capability inventory: The skill performs file system writes to create and update markdown files within the 'profiles/' and 'outputs/' directories.
- [INDIRECT_PROMPT_INJECTION]: Sanitization: There is no evidence of content sanitization or validation of the data retrieved from external sources before it is processed by the AI agent.
Audit Metadata