google-ads-negative-keywords
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read an external file (.agents/product-marketing-context.md) to gather business context. While this allows external data to enter the agent's prompt, the skill possesses no tools (such as network access, file writing, or command execution) that could be exploited by injected instructions. 1. Ingestion points: .agents/product-marketing-context.md referenced in SKILL.md. 2. Boundary markers: Absent; there are no instructions to ignore embedded commands. 3. Capability inventory: None; the skill is limited to providing text-based advertising advice. 4. Sanitization: Absent.
- [NO_CODE]: The skill consists exclusively of instructional markdown and does not include any scripts, executable code, or remote code patterns.
Audit Metadata