creating-marketing-context
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the codebase (such as the README, landing pages, and marketing copy) which could potentially contain malicious instructions intended to manipulate the agent's behavior during the auto-drafting process.\n
- Ingestion points: The workflow in
SKILL.mddirects the agent to read the README, landing pages, marketing copy, about pages, and package.json to generate a draft.\n - Boundary markers: The skill does not define specific boundary markers or instructions for the agent to ignore potentially malicious embedded content within the ingested files.\n
- Capability inventory: The agent has the capability to read project files and write the generated marketing context to the
.claude/directory.\n - Sanitization: There is no evidence of content sanitization or validation of the data read from the repository files.
Audit Metadata