marketing-campaign
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash command to execute a Python script located at .claude/skills/project-diagrams/scripts/generate_schematic.py to generate campaign visualizations.
- [SAFE]: External references target reputable industry services including Hootsuite, ClickUp, Sprout Social, and Zapier.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by interpolating user-supplied marketing details and diagram descriptions into templates and tool arguments. Ingestion points: User-defined placeholders in SKILL.md. Boundary markers: Absent. Capability inventory: Bash (for diagram generation), Write, and Edit. Sanitization: No explicit filtering or validation of user-provided strings is mentioned.
Audit Metadata