analytics
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides documentation and code templates for analytics implementation. No malicious patterns, obfuscation, or data exfiltration attempts were detected.
- [NO_CODE]: The skill contains only Markdown and JSON configuration files; no executable scripts such as Python, JavaScript, or shell scripts are included in the skill package.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest project-specific context from local files such as
.agents/product-marketing.md. This represents a potential surface for indirect prompt injection if the ingested files contain untrusted data. 1. Ingestion points:.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.md(SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: None (no custom scripts or tool definitions are provided in the skill). 4. Sanitization: Absent. - [EXTERNAL_DOWNLOADS]: The skill references external documentation and tool registries hosted on GitHub (github.com/coreyhaines31/marketingskills). These are informational links for the user or agent and do not involve automated script execution or unverified dependency installation.
Audit Metadata