copy-editing
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core purpose is to ingest and process untrusted marketing copy provided by users, which creates a potential surface for indirect prompt injection.
- Ingestion points: Untrusted marketing text is provided by the user for the Seven Sweeps Framework as described in SKILL.md.
- Boundary markers: The skill does not instruct the agent to use XML tags, delimiters, or specific 'ignore embedded instructions' markers when handling user-provided copy.
- Capability inventory: The skill is configured to read project context from local files such as '.agents/product-marketing.md' or '.claude/product-marketing.md' (SKILL.md).
- Sanitization: There are no instructions for sanitizing, escaping, or validating the ingested content before it is processed by the agent.
Audit Metadata