affiliate-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions include steps to read local project configuration files to tailor its marketing advice.
- Ingestion points: The skill reads
.claude/project-context.mdand.cursor/project-context.mdto identify product type and audience (referenced inSKILL.md). - Boundary markers: The instructions do not define specific delimiters or warnings to ignore potential instructions embedded within these context files.
- Capability inventory: The skill is strictly instructional and does not utilize tools for command execution, network operations, or file system modifications.
- Sanitization: No evidence of data sanitization or input validation for the ingested project context is present.
- [SAFE]: The skill consists of markdown-based marketing documentation and strategic frameworks. It does not ship with scripts or binaries, and its operations are limited to providing text-based recommendations to the user.
Audit Metadata