optimize-newsletter
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface
- Ingestion points: The skill ingests untrusted data in the form of newsletter outlines, bullet points, and rough drafts provided by the user, as specified in
SKILL.mdunder 'Step 1: Assess the Input' and 'Step 2: Draft or Optimize Content'. - Boundary markers: There are no explicit delimiters (such as XML tags or markdown blocks) or instructions to the model to ignore potential instructions embedded within the user-supplied content.
- Capability inventory: The skill has the capability to orchestrate and pass data to multiple other skills including
creator-stack:write,creator-stack:title, andcreator-stack:hook. - Sanitization: The skill lacks any visible sanitization, validation, or escaping logic for the user-supplied text before it is interpolated into prompts for foundation skills.
Audit Metadata