journey-design

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script journey-engine.py (located in the plugin's script directory) to create and simulate journey models. The command uses arguments such as --brand, --action, and JSON-formatted strings for states and transitions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from various external files to inform the agent's behavior and design decisions, creating a potential surface for indirect injection if these files contain malicious instructions.
  • Ingestion points: Reads brand profiles from ~/.claude-marketing/brands/, compliance rules from skills/context-engine/compliance-rules.md, and agency SOPs from ~/.claude-marketing/sops/.
  • Boundary markers: No specific delimiters or instructions to ignore embedded content within these files are defined.
  • Capability inventory: The skill possesses the capability to execute shell commands (via the python invocation) and read multiple files from the local filesystem.
  • Sanitization: The instructions do not specify any sanitization or validation logic for the content retrieved from the brand profile or compliance files before it is used in the prompt context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 09:31 AM