co-marketing
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from local project context files, which could serve as a vector for indirect instructions.
- Ingestion points: Reads from
.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.md(SKILL.md). - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the content of these context files.
- Capability inventory: The skill is primarily focused on text generation and strategy; it does not possess high-risk capabilities such as file system writes, network exfiltration commands, or arbitrary code execution.
- Sanitization: No explicit sanitization or validation of the ingested markdown content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill references external documentation and tool registries hosted on GitHub.
- Source: Fetches informational content and guides from the
github.com/coreyhaines31/marketingskillsrepository.
Audit Metadata