popups
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external project files to provide contextual recommendations, which is a common pattern for AI agents.
- Ingestion points: SKILL.md identifies .agents/product-marketing.md, .claude/product-marketing.md, and product-marketing-context.md as sources of context.
- Boundary markers: No specific delimiters or safety instructions are used to wrap the ingested content to prevent the agent from following instructions embedded in those files.
- Capability inventory: The skill does not define its own scripts or executable tools, relying instead on the agent's default environment.
- Sanitization: No explicit sanitization or filtering of the external file content is described.
Audit Metadata