launch

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides strategic documentation and checklists for product launches. It contains no executable code, scripts, or remote network operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest local context from files such as .agents/product-marketing.md. While this is an attack surface for indirect prompt injection, the risk is negligible because the skill lacks dangerous capabilities that could be exploited through the ingested data. 1. Ingestion points: The skill instructs reading from .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md. 2. Boundary markers: No explicit delimiters or warnings are provided to the agent to isolate or treat the ingested content as untrusted. 3. Capability inventory: The skill contains no code execution capabilities, file system modification tools, or network operation scripts. 4. Sanitization: No validation or sanitization is performed on the ingested file content.
  • [SAFE]: References to external services like Product Hunt, SparkToro, and Navattic are for informational and planning purposes only and do not involve suspicious downloads or unauthorized data transfers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:12 PM