gtm-marketing
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill follows established marketing methodologies and uses standard agent tools for research and content creation.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests content from external project files to inform its strategy.
- Ingestion points: SKILL.md reads multiple context files from the projects/ folder (e.g., gtm-context.md, positioning.md) in the 'Before Starting' phase.
- Boundary markers: None identified; the instructions do not include delimiters or specific guidance to ignore potential instructions embedded in the project files.
- Capability inventory: The skill utilizes Read, Glob, Grep, WebSearch, Task, AskUserQuestion, and Write tools.
- Sanitization: There is no evidence of content sanitization or validation of the read files before their data is processed or passed to sub-agents.
Audit Metadata