product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the user's codebase (e.g., README, marketing copy, and package.json) to generate a marketing summary. This data could contain malicious instructions intended to manipulate the agent's output or behavior. \n
- Ingestion points: Repository files such as
README.md,package.json, and other documentation or marketing assets within the codebase. \n - Boundary markers: The skill lacks explicit boundary markers or instructions telling the agent to treat the repository content strictly as data and to ignore any embedded commands or directives. \n
- Capability inventory: The agent has the ability to read multiple files across the repository and write a summarized context file to the
.claude/directory. \n - Sanitization: No sanitization, filtering, or validation is performed on the content read from the files before it is processed by the agent.
Audit Metadata