convertkit-automation
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from external sources (Kit subscriber and broadcast data) and possesses impactful capabilities.\n
- Ingestion points: Subscriber data retrieved via
KIT_LIST_SUBSCRIBERSand broadcast content viaKIT_LIST_BROADCASTSas described inSKILL.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for processing external data.\n
- Capability inventory: The skill uses tools with side effects, including
KIT_DELETE_SUBSCRIBER,KIT_DELETE_BROADCAST, andKIT_TAG_SUBSCRIBER.\n - Sanitization: There is no evidence of data sanitization or validation before using external content in the agent's context.\n- [EXTERNAL_DOWNLOADS]: The skill requires connection to an external MCP server endpoint at
https://rube.app/mcpto function.\n- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any scripts or executable files.
Audit Metadata