offers
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project-specific files (e.g., .agents/product-marketing.md) for context. This creates a surface for indirect prompt injection if those files contain malicious instructions. However, the skill lacks any executable capabilities, network access, or file-writing tools, which effectively neutralizes the risk. 1. Ingestion points: SKILL.md. 2. Boundary markers: None. 3. Capability inventory: None. 4. Sanitization: None.
- [SAFE]: The skill consists exclusively of markdown documentation and YAML configuration. No scripts, automated tasks, or remote resource fetches were identified.
Audit Metadata