sms
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest data from external context files, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: SKILL.md directs the agent to read context from files such as .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md before starting tasks.
- Boundary markers: There are no instructions to use delimiters or to disregard potentially malicious instructions embedded within these external context files.
- Capability inventory: The skill references external tool integrations in SKILL.md (e.g., Klaviyo, Brevo, Twilio) which provide the agent with capabilities that could be influenced by injected instructions in the context files.
- Sanitization: The skill contains no instructions for sanitizing or validating the content read from these external files.
Audit Metadata