product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository which could lead to prompt injection vulnerabilities.
- Ingestion points: The skill reads various files from the codebase in
Step 2: Gather Information, includingREADME.md,package.json, landing pages, and marketing copy. - Boundary markers: The instructions do not specify any boundary markers or instructions for the agent to ignore or delimit instructions that might be embedded within the project files it reads.
- Capability inventory: The skill has the capability to write a new file at
.claude/product-marketing-context.mdbased on the content it parses. - Sanitization: There is no evidence of content sanitization or validation of the data read from the codebase before it is interpolated into the marketing context document.
Audit Metadata