onboarding-cro

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of instructional text and reference tables. No obfuscation, command execution, or network operations were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection by reading a project context file.
  • Ingestion points: The skill reads .claude/product-marketing-context.md to gather background information (found in SKILL.md).
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested context.
  • Capability inventory: The skill is limited to providing text-based recommendations and audits; it does not request tools for file writing, network access, or shell execution.
  • Sanitization: There is no evidence of sanitization for the external content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:00 PM