influencer-creator
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
campaign-tracker.pywith arguments--brandand--actionto manage campaign data. This involves shell command execution using session-derived variables.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data ingestion and processing workflows.\n - Ingestion points: The agent reads brand profiles (
profile.json) and guidelines (_manifest.json) from environment-specific paths (~/.claude-marketing/brands/).\n - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its own system prompts and the content of the external files.\n
- Capability inventory: The skill has the ability to execute system commands through Python scripts.\n
- Sanitization: No sanitization or verification of the external file content is performed before processing.
Audit Metadata