marketing-plan
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the materials directory and kickoff transcripts which could contain malicious instructions.
- Ingestion points: Files located in the materials directory and user-provided transcripts as documented in methodology.md.
- Boundary markers: The instructions do not define explicit delimiters or instructions to ignore embedded commands for external content.
- Capability inventory: The skill uses GitHub MCP, Stripe MCP, and browser automation tools as documented in the operations stack mapping.
- Sanitization: There is no evidence of input validation or sanitization for data extracted from external materials.
Audit Metadata