free-tools
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation and JSON evaluation files. It contains no executable scripts (Python, JavaScript, or shell) and performs no file system or network operations.
- [INDIRECT_PROMPT_INJECTION]: The instructions in SKILL.md direct the agent to read context from external files like .agents/product-marketing.md. This constitutes a data ingestion surface. However, this is not a security risk here because the skill lacks any capabilities—such as code execution, network requests, or file writing—that could be exploited via malicious content in those files. Ingestion points: SKILL.md (reads .agents/product-marketing.md, .claude/product-marketing.md, product-marketing-context.md); Boundary markers: Absent; Capability inventory: None detected; Sanitization: Absent.
Audit Metadata