referrals
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external context files (.agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md) to inform its marketing strategy. This creates an indirect prompt injection surface where instructions embedded in these files could influence agent behavior.
- Ingestion points: Accesses local project files for marketing context as described in SKILL.md.
- Boundary markers: There are no instructions to use delimiters or ignore potentially malicious embedded commands when reading these files.
- Capability inventory: The skill is intended for use in environments where the agent may have broad capabilities including file system access and tool execution as indicated by the tool integration references in SKILL.md.
- Sanitization: No validation or sanitization of the context file content is implemented.
Audit Metadata