marketing-ideas
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a static knowledge base of marketing strategies and does not include any executable code, dangerous tool invocations, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions suggest reading a local file (.claude/product-marketing-context.md) to gain marketing context. This represents a potential surface for indirect prompt injection if the file contains malicious instructions. However, because the skill lacks any dangerous capabilities (network, shell, or file-write tools) to exploit, this surface is considered a negligible risk in this specific context.
- Ingestion points: The file path .claude/product-marketing-context.md is ingested in the SKILL.md instructions.
- Boundary markers: None present in the instructions.
- Capability inventory: No subprocess calls, network operations, or file-write capabilities were detected across the skill files.
- Sanitization: None present.
Audit Metadata