startup-marketing-brain
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is composed of strategic documentation and playbooks aimed at helping founders market their products. All external tools and services mentioned, such as Mixpanel, RevenueCat, F5bot, and Claude Code, are well-known and legitimate services within the software development and marketing communities.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface for indirect prompt injection in its community monitoring workflow, which involves reading untrusted data from platforms like Reddit, Twitter, and Hacker News (Ingestion points: references/ai_automation_workflows.md). While specific data boundary markers are not defined, the risk is effectively mitigated by a mandatory 'Human-in-the-Loop' review step (Capability inventory: automated reply generation; Sanitization: manual review), ensuring that all AI-generated content is vetted by the user before publication.
Audit Metadata