product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to automate the creation of a marketing context file (
.agents/product-marketing-context.md) based on existing repository content. It does not perform network operations, execute remote code, or access sensitive system paths. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it reads untrusted data from the codebase (e.g., README, landing pages, marketing copy) to auto-draft content. If these files contain malicious instructions, they could influence the generated context, which is then used by other marketing skills.
- Ingestion points: Local repository files including README, landing pages, marketing copy, and package.json as defined in the
Workflowsection ofSKILL.md. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: The skill has the capability to read local files and write to the
.agents/directory. - Sanitization: No explicit sanitization or validation of the ingested file content is performed.
Audit Metadata