analytics
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and YAML configuration files. It does not contain any executable scripts, binary files, or automated commands that could perform network operations, file system modifications, or process execution.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions specify that the agent should ingest external data and documentation, which creates a theoretical attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read
.agents/marketing-context.md(SKILL.md) and process event tracking triggers and data-layer contracts. - Boundary markers: No explicit delimiters or boundary markers are defined for the ingested file content.
- Capability inventory: The skill does not include any scripts or tools that perform subprocess calls, file writes, or network operations.
- Sanitization: The skill includes high-level instructions to avoid processing secrets or sensitive personal data, but lacks technical sanitization for input files. Given the lack of dangerous capabilities, this surface is considered safe.
Audit Metadata