content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data sources, which presents a theoretical surface for indirect prompt injection.
- Ingestion points: The skill analyzes user-provided content such as sales transcripts, survey responses, and keyword exports, and performs web searches on forums like Reddit and Quora.
- Boundary markers: There are no explicit instructions to the agent to treat this external data as untrusted or to use specific delimiters.
- Capability inventory: The skill is primarily instructional and focused on generating tables and strategies; it does not possess or utilize tools for file system modification, arbitrary code execution, or network exfiltration.
- Sanitization: No sanitization of external input is specified in the instructions.
- [DATA_EXPOSURE]: The skill attempts to read context from a local file at
.claude/product-marketing-context.md. - This file is used for gathering project-specific marketing information and is a standard practice for establishing task context, not an attempt to harvest sensitive system credentials.
Audit Metadata