paywall-upgrade-cro
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read an external context file, creating a surface for indirect prompt injection if that file contains malicious instructions.
- Ingestion points: The skill attempts to read
.claude/product-marketing-context.mdat the start of the interaction. - Boundary markers: No specific delimiters or safety instructions are provided to the agent to treat this file content as untrusted data.
- Capability inventory: The skill lacks any dangerous capabilities; it does not invoke shell commands, perform network operations, or write to the file system.
- Sanitization: No sanitization or validation of the ingested context file is performed.
Audit Metadata