directory-submissions
Fail
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Automated scanners have flagged the file 'references/submission-tracker-template.csv' as having a malicious reputation (FileRepMalware).
- [EXTERNAL_DOWNLOADS]: The URL 'https://fitprofessionals.net', which is included in both 'references/directory-list.md' and the tracking CSV, is currently blacklisted by security scanners.
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external marketing context files, creating a surface for indirect prompt injection. * Ingestion points: The skill reads '.agents/product-marketing.md', '.claude/product-marketing.md', and 'product-marketing-context.md'. * Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore potentially malicious commands within these files. * Capability inventory: The skill provides instructions for performing manual or agent-assisted directory submissions based on this data. * Sanitization: There is no description of sanitization or validation for the content of these marketing context files.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata