launch-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill files contain purely instructional content and checklists for marketing purposes. No malicious patterns, obfuscation, or unauthorized access to sensitive system files were detected. The skill is purely instructional and references internal documentation via relative paths (e.g., introw.md).
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it is instructed to ingest data from project-specific context files. Ingestion points: Reads .agents/product-marketing-context.md and .claude/product-marketing-context.md (SKILL.md). Boundary markers: Absent; the instructions do not specify delimiters or warnings to ignore instructions within the context files. Capability inventory: None; the skill is limited to text analysis and strategy generation and has no access to subprocesses, network tools, or file-writing capabilities. Sanitization: Absent; the skill does not perform validation or sanitization of the ingested context.
Audit Metadata