content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted external data, including customer call transcripts, survey responses, and web search results from platforms like Reddit and Quora. This creates a vulnerability surface where malicious instructions hidden in the data could attempt to manipulate the agent's behavior.
- Ingestion points: Reads a local context file
.claude/product-marketing-context.mdand processes user-provided inputs such as keyword exports, call transcripts, survey data, and live web search results (SKILL.md). - Boundary markers: Absent. The instructions do not define specific delimiters or provide the agent with guidance to ignore embedded instructions within the processed data.
- Capability inventory: The skill involves reading local files and performing web searches to extract information (SKILL.md).
- Sanitization: Absent. There are no procedures defined for validating, filtering, or escaping content retrieved from external sources before it is processed by the agent.
Audit Metadata