schema-markup
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read information from
.agents/product-marketing-context.mdand.claude/product-marketing-context.mdto inform its responses. This creates a surface for indirect prompt injection where malicious instructions embedded in these files could influence the agent's behavior. - Ingestion points:
SKILL.mdreferences reading from.agents/product-marketing-context.mdand.claude/product-marketing-context.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within these context files are provided in the instructions.
- Capability inventory: The skill is designed to generate JSON-LD code blocks and provide SEO advice. It does not include scripts that perform subprocess calls, file writes, or network operations.
- Sanitization: The instructions do not specify any validation or sanitization for the content read from these external context files.
Audit Metadata