sms
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external context files (e.g., .agents/product-marketing.md) to inform its recommendations. If these files are compromised with malicious instructions, they could override the agent's behavior.
- Ingestion points: The skill reads .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md as identified in SKILL.md.
- Boundary markers: There are no explicit instructions or markers to delimit external content or warn the agent to ignore embedded instructions within these files.
- Capability inventory: The skill generates SMS marketing plans, sequence designs, and platform recommendations based on the ingested context.
- Sanitization: No sanitization, validation, or filtering is applied to the content of the external context files before processing.
Audit Metadata