marketing-plan
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data (decks, transcripts, etc.) from the ~/marketing-plans/{client-slug}/materials/ directory to generate marketing research and roadmaps.
- Ingestion points: Untrusted files located in the materials/ folder.
- Boundary markers: There are no explicit boundary markers or warnings to the agent to ignore instructions embedded within the processed materials.
- Capability inventory: The skill possesses significant capabilities including file system read/write access, network operations via various MCPs (Stripe, GitHub, GA4), and potential execution of git commands.
- Sanitization: No sanitization or validation of the content of the materials is described.
Audit Metadata