martech-audit
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files and user input, which presents an attack surface for indirect prompt injection.\n
- Ingestion points: The skill reads brand profiles (
profile.json), active brand settings (_active-brand.json), guidelines (_manifest.json), and agency SOPs from the~/.claude-marketing/local directory, alongside user-supplied tool lists and budget information.\n - Boundary markers: No specific boundary markers or instructions to ignore embedded instructions are defined for the data ingestion steps in the process.\n
- Capability inventory: The skill is restricted to analysis and reporting; it does not request network access, file writing capabilities, or shell execution in its instructions.\n
- Sanitization: There is no evidence of sanitization or validation applied to the external content before it is processed by the agent.
Audit Metadata