signup
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external project files to gain context before providing recommendations.\n
- Ingestion points: Instructions explicitly direct the agent to read
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.mdif they exist.\n - Boundary markers: The skill does not provide delimiters or instructions to the agent to ignore potential commands embedded within the context files.\n
- Capability inventory: The skill's primary function is to provide text-based CRO recommendations; it does not contain code to perform file writes, network operations, or shell command executions.\n
- Sanitization: There is no evidence of sanitization or filtering applied to the content of the ingested context files.
Audit Metadata