onboarding
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains instructions to ingest external context files, such as
.agents/product-marketing.md, to personalize its recommendations. While this represents an ingestion point for potentially untrusted data, the risk is negligible as the skill possesses no dangerous capabilities (e.g., network access, file writing, or command execution) that could be exploited through injection, and the behavior is fundamental to its primary purpose. - Ingestion points:
SKILL.md(context files like.agents/product-marketing.md). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts in the context files.
- Capability inventory: The skill has no capability for network exfiltration, shell execution, or file system modifications.
- Sanitization: No data sanitization or validation logic is present for the ingested context.
- [SAFE]: The skill is entirely instructional and documentation-based. It does not contain any executable scripts, binary files, or network-active code. All external references are to reputable, well-known services (e.g., Amplitude, ChartMogul) for informational purposes.
Audit Metadata