product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local codebase files such as README, package.json, and marketing copy to automatically draft positioning documents. This creates a surface where malicious instructions embedded in those project files could influence the agent's behavior.
- Ingestion points: Local repository files including README, landing pages, marketing copy, about pages, meta descriptions, and package.json as described in Step 2.
- Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore instructions found within the analyzed codebase files.
- Capability inventory: The skill is capable of reading various project files and writing the final context document to '.claude/product-marketing-context.md'.
- Sanitization: There is no evidence of sanitization, validation, or filtering of the content read from the codebase before it is used to generate the draft.
Audit Metadata