ab-test-setup
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project-specific context from a local file if it exists to personalize the testing design.
- Ingestion points:
.claude/product-marketing-context.md(referenced inSKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions to treat the content of the marketing context file as untrusted data.
- Capability inventory: The skill is restricted to generating documentation and providing advice; it lacks any capabilities for file writing, system command execution, or network communication.
- Sanitization: There is no explicit sanitization or validation of the content read from the context file.
Audit Metadata