customer-journey-map
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions.
- Ingestion points: The skill reads user-provided files (interview transcripts, survey data, analytics, support tickets) and performs web searches based on user-provided URLs in
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat external data as untrusted or to ignore instructions contained within that data.
- Capability inventory: The skill's primary capabilities are text analysis and generating a markdown document; it does not utilize high-risk tools such as shell execution or network exfiltration.
- Sanitization: No data validation or sanitization mechanisms are implemented for the external inputs.
Audit Metadata