content-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads external brand data and SOP files which could contain instructions that influence the agent's output.
- Ingestion points: Loads ~/.claude-marketing/brands/_active-brand.json, profile.json, compliance-rules.md, and _manifest.json.
- Boundary markers: No specific delimiters or safety instructions are used to separate brand data from skill logic.
- Capability inventory: The skill only reads local files and lacks capabilities for network access, file writing, or shell command execution.
- Sanitization: No content validation or sanitization is specified for the loaded data.
Audit Metadata