import-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill imports brand guidelines from external sources, which are then saved and persistently applied to future tasks.
- Ingestion points:
SKILL.md(argument-hint) accepts a[file-path or URL]and the input requirements includePasted guideline content. - Boundary markers: There are no instructions to the agent to use delimiters or ignore embedded instructions within the ingested data.
- Capability inventory: The skill performs file writes to
~/.claude-marketing/and executes thescripts/guidelines-manager.pytool. - Sanitization: No sanitization, escaping, or validation of the external content is described before it is formatted into markdown and saved.
- [COMMAND_EXECUTION]: The skill invokes a local Python script to perform file management operations.
- Evidence: Step 6 in
SKILL.mddescribes executingscripts/guidelines-manager.py --brand {slug} --action save --category {category}. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads from and writes to specific configuration and data paths within the user's home directory.
- Evidence: The process involves reading
~/.claude-marketing/brands/_active-brand.jsonand writing structured guidelines to~/.claude-marketing/brands/{slug}/guidelines/.
Audit Metadata