Gen Agent Trust Hub

The 'daily-briefing' skill is highly vulnerable to Indirect Prompt Injection. It is designed to ingest data from untrusted external sources—including email bodies, calendar descriptions, and CRM notes—without any sanitization or boundary markers. An attacker could send a malicious email or calendar invite containing hidden instructions that the agent would then execute, potentially leading to unauthorized data access, manipulation of sales priorities, or exfiltration of sensitive information.

The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.