marketing-psychology
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill directs the agent to ingest untrusted data from project files, creating a surface for indirect prompt injection.
- Ingestion points: SKILL.md (How to Use section) instructs the agent to read content from
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md. - Boundary markers: The skill lacks instructions to isolate the ingested file content or to ignore any potential instructions embedded within those files.
- Capability inventory: The skill primarily provides strategic advice and mental models; it does not request or use high-risk tools such as arbitrary shell execution or network exfiltration.
- Sanitization: There are no mechanisms mentioned for validating or sanitizing the content of the external context files.
Audit Metadata