marketing-campaign-management
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and strategic frameworks without any executable scripts (Python, Node.js) or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from workspace files to generate marketing drafts, creating a potential surface for indirect prompt injection.
- Ingestion points: Reads strategy/brand.md, about/me.md, content/ideas.md, and content/calendar.md in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external file content as untrusted.
- Capability inventory: No executable capabilities (scripts, network, or system tools) are present in the skill.
- Sanitization: No data validation or sanitization steps are defined for the ingested context.
Audit Metadata