sms
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest marketing context from local files (such as
.agents/product-marketing.md) to customize its strategy. This creates an attack surface where malicious instructions placed in those files could influence the agent's behavior. - Ingestion points: The skill reads project files including
.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.md(specified in SKILL.md). - Boundary markers: The instructions do not require the agent to use delimiters or ignore embedded instructions when reading these context files.
- Capability inventory: The agent is empowered to design SMS sequences and interact with external messaging platforms like Klaviyo and Brevo via MCP integrations (referenced in SKILL.md and references/platforms.md).
- Sanitization: There are no instructions provided to sanitize or validate the content of the external marketing context files before they are processed.
Audit Metadata