paywalls
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest content from external files like .agents/product-marketing.md to establish context, which creates a surface where malicious instructions in those files could influence agent behavior.
- Ingestion points: SKILL.md identifies .agents/product-marketing.md, .claude/product-marketing.md, and product-marketing-context.md as context sources.
- Boundary markers: The instructions lack explicit delimiters or warnings to treat these file contents strictly as data.
- Capability inventory: The skill is primarily advisory and does not define or use high-risk tools such as network access, shell execution, or file-writing scripts.
- Sanitization: No sanitization or validation of the external file content is performed before processing by the agent.
Audit Metadata