content-strategy
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through the processing of untrusted external data. \n
- Ingestion points: The skill explicitly directs the agent to ingest and analyze data from various external sources including Reddit, Quora, competitor blogs via web search, and user-supplied call transcripts or survey results. It also reads a local context file at
.claude/product-marketing-context.md. \n - Boundary markers: No delimiters or defensive instructions are provided to help the agent distinguish between its own instructions and potentially malicious commands embedded in the external data. \n
- Capability inventory: The skill leverages the agent's ability to read local files and perform web searches. \n
- Sanitization: There is no requirement or logic included to sanitize, validate, or filter the content retrieved from external websites or user-provided transcripts. \n- [NO_CODE]: This skill consists entirely of markdown instructions and does not include any scripts, binaries, or executable code.
Audit Metadata