launch
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions create an indirect prompt injection surface through data ingestion.\n- Ingestion points: The instructions in
SKILL.mddirect the agent to read local files such as.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md.\n- Boundary markers: The skill does not provide boundary markers or instructions to disregard potential commands embedded in these context files.\n- Capability inventory: The skill does not contain any shell commands, subprocess calls, or file-writing capabilities.\n- Sanitization: There is no explicit sanitization logic for the ingested context data.
Audit Metadata