onboarding-cro
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill includes a routine check for a local context file (
.agents/product-marketing-context.md) to provide tailored user onboarding advice based on existing product marketing data. - [PROMPT_INJECTION]: The skill processes data from a local context file, creating a surface for indirect prompt injection. However, the skill's functionality is limited to generating text recommendations and lacks tools for command execution or network access.
- Ingestion points: .agents/product-marketing-context.md (referenced in SKILL.md)
- Boundary markers: None present.
- Capability inventory: None detected; the skill is restricted to audit frameworks and instructional content.
- Sanitization: None present.
Audit Metadata