signup
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external RevOps inbound-routing playbook hosted on GitHub (
github.com/coreyhaines31/marketingskills). This serves as a reference for handling sales-assisted routing logic within signup flows. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from local environment files such as
.agents/product-marketing.mdandproduct-marketing-context.mdto personalize its recommendations. While this creates a surface for indirect prompt injection if those files contain malicious instructions, the skill's capabilities are limited to providing text-based advice, posing no significant security threat. - Ingestion points: Reads
.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.mdfiles from the project directory. - Boundary markers: No explicit delimiters or instructions are used to separate ingested context from the agent's core instructions.
- Capability inventory: The skill contains no code or scripts and is limited to generating text-based recommendations; it has no capabilities for file modification, network communication, or shell command execution.
- Sanitization: No validation or sanitization is performed on the content ingested from local marketing files.
Audit Metadata