revops
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party platforms for CRM, scheduling, and data enrichment, including HubSpot, Salesforce, Calendly, SavvyCal, Clearbit, Apollo, and ActiveCampaign. These references are standard integrations for revenue operations and trace to legitimate service providers.\n- [PROMPT_INJECTION]: The skill instructions direct the agent to read an external context file to gather business-specific information. This creates a surface for indirect prompt injection if the content of that file is untrusted.\n
- Ingestion points: The file
.agents/product-marketing-context.mdis ingested to obtain go-to-market and tool stack details.\n - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested context file.\n
- Capability inventory: The skill primarily generates text-based recommendations and documentation templates. It lacks access to dangerous capabilities like arbitrary subprocess execution, file-system writing, or unconstrained network operations.\n
- Sanitization: No sanitization or validation of the ingested context file content is performed by the skill instructions.
Audit Metadata