suede-offers
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read local context files to inform its offer design recommendations, creating a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: SKILL.md directs the agent to check for and read
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.mdbefore proceeding. - Boundary markers: The skill lacks explicit delimiters or instructions for the agent to ignore natural language commands found within these ingested context files.
- Capability inventory: The skill contains no executable scripts, tool definitions, subprocess calls, network operations, or file-writing capabilities. Its output is limited to a structured Markdown "Offer Brief."
- Sanitization: No sanitization or filtering is performed on the data read from the context files.
- [EXTERNAL_DOWNLOADS]: The skill card and documentation reference external URLs for installation and support.
- Evidence: Links to
github.com/JasonColapietroandskills.suedeai.aiare provided in CARD.md and reference files. - Context: These resources belong to the verified author (jasoncolapietro) and are standard for skill documentation and updates.
Audit Metadata