emails
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists of instructional markdown and reference files providing best practices for email marketing and automation. The content is professional and focused on the stated purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the ingestion of project context files.\n
- Ingestion points: Instructions in
SKILL.mddirect the agent to read.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.md.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are mandated for the content of these files.\n
- Capability inventory: The agent generates email sequences and references integrations with third-party email service providers (Mailchimp, Resend, etc.), suggesting the ability to interact with or generate data for external services.\n
- Sanitization: There are no instructions for sanitizing or escaping the content of the marketing context files before interpolation into prompts.\n- [EXTERNAL_DOWNLOADS]: The skill references an external GitHub repository (github.com/coreyhaines31/marketingskills) for documentation on marketing tool integrations. These links are provided for informational purposes and do not involve automated code execution or package installation.
Audit Metadata