tracking-plan
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists exclusively of Markdown documentation and a YAML configuration file. It contains no executable scripts (Python, JavaScript, shell, etc.) or binary files.
- [SAFE]: The instructions focus on best practices for data governance, such as avoiding the collection of PII or secrets. There are no network requests, file system modifications, or attempts to access credentials.
- [INDIRECT_PROMPT_INJECTION]: While the skill reads external context from
.agents/marketing-context.md, it does so as a static reference for business requirements. There is no evidence of unsafe interpolation of untrusted data into executable commands.
Audit Metadata