00-ke-hoach-mkt
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requests user-provided information such as product descriptions, target audience details, and marketing goals to generate its output. This creates a surface for indirect prompt injection where malicious instructions could be embedded in the user's responses. However, the risk is minimal as the skill's functionality is limited to generating Markdown text and it does not utilize high-privilege tools, shell commands, or network access.
- Ingestion points: User responses to the four discovery questions defined in
SKILL.md. - Boundary markers: Absent; the skill does not use delimiters or instructions to ignore potential commands within user data.
- Capability inventory: None detected. The skill generates text output and does not perform file system operations, network requests, or system command execution.
- Sanitization: Absent.
- [SAFE]: The skill's instructions and structure are consistent with its stated purpose of marketing strategy and planning. No obfuscation, hardcoded credentials, or suspicious remote dependencies were found.
Audit Metadata