dark-funnel
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from various external platforms, creating a surface for indirect prompt injection.
- Ingestion points: The skill aggregates mentions and sentiment data from Reddit, community forums, Discord, Slack, and AI chatbot citations as documented in the 'Process' section of SKILL.md.
- Boundary markers: The instructions do not define clear delimiters or specific safety instructions to isolate external content from the agent's core instructions.
- Capability inventory: The skill reads local files from the
~/.claude-marketing/directory (profiles, guidelines, and SOPs) and performs marketing correlation analysis. - Sanitization: There is no evidence of data sanitization or filtering for the external content before it is processed by the analysis agents.
Audit Metadata