recall
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script to query the intelligence graph based on user-provided parameters.
- Evidence: The Process section specifies executing
intelligence-graph.py query-relevantwith context dimensions provided by the user. - [DATA_EXPOSURE]: The skill accesses configuration and profile files located in a hidden application directory within the user's home folder.
- Evidence: The skill reads from
~/.claude-marketing/brands/_active-brand.jsonand~/.claude-marketing/brands/{slug}/profile.jsonto load brand context. - [PROMPT_INJECTION]: The skill processes untrusted user input and brand profile data to generate arguments for a command-line tool, presenting a surface for indirect prompt injection.
- Ingestion points: User-provided query context and files in
~/.claude-marketing/. - Boundary markers: None identified in the instructions.
- Capability inventory: Execution of the
intelligence-graph.pyscript. - Sanitization: No explicit input validation or sanitization of the context dimensions is described.
Audit Metadata