offers
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely composed of markdown documentation and instructions for offer construction. It does not include any code, external scripts, or network operations. All frameworks described (Value Equation, Offer Anatomy) are legitimate marketing strategies.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to read local context files to understand the user's project, which constitutes a data ingestion surface. \n- Ingestion points: SKILL.md (instructions to read .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md). \n- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included for these files. \n- Capability inventory: None. The skill does not define or utilize any tools for subprocess execution, file modification, or network communication. \n- Sanitization: No filtering or sanitization of the ingested content is performed. The risk is assessed as safe due to the absence of exploitable capabilities.
Audit Metadata