product-launch
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no malicious patterns, hardcoded secrets, or unauthorized communication. All behaviors align with the stated purpose of helping with launch strategy and project coordination.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies external data sources that could potentially contain injected instructions.
- Ingestion points: Reads project-specific information from
.claude/project-context.mdand.cursor/project-context.mdas described in the Initial Assessment section ofSKILL.md. - Boundary markers: Not present; the agent is instructed to read the full file.
- Capability inventory: No command execution, file system writes, or network operations are included in this skill's logic.
- Sanitization: None detected; however, the lack of dangerous tools/capabilities minimizes the risk of exploitation via these files.
Audit Metadata