cold-email
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external context from project files and user input into its email generation process.
- Ingestion points: The skill instructions in
SKILL.mdexplicitly direct the agent to read.agents/product-marketing.mdor.claude/product-marketing.mdto inform its outreach drafts. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined to protect the agent from malicious instructions that could be hidden within the context files.
- Capability inventory: The skill is limited to generating text; it does not include commands for network operations, file writing, or subprocess execution.
- Sanitization: The content from context files is used as-is for generating drafts without validation or filtering.
- [SAFE]: No malicious patterns such as obfuscation, credential theft, or remote code execution were detected. The skill consists of legitimate markdown documentation and copywriting frameworks.
Audit Metadata