brand-intelligence
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of markdown instructions and static SVG image assets. No executable scripts, binaries, or dangerous shell commands were identified.
- [NO_CODE]: The skill does not contain any implementation scripts (e.g., Python or JavaScript), which significantly reduces the potential for malicious logic execution.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a process for ingesting external brand assets such as manuals and vector files, which represents a theoretical attack surface for indirect prompt injection. However, the risk is minimal as the skill lacks any tools or automated processing scripts to act on the ingested data. Ingestion points: Brand manual and asset parsing (SKILL.md). Boundary markers: None. Capability inventory: None. Sanitization: None.
Audit Metadata