product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes untrusted data from the repository to generate summaries.
- Ingestion points: The skill reads
README, landing pages, marketing copy, andpackage.jsonto auto-draft the marketing context (SKILL.md, Step 2). - Boundary markers: No explicit delimiters or instructions are used to separate the content of analyzed files from the agent's core instructions.
- Capability inventory: The skill has the capability to read any file in the repository and write a summary to
.agents/product-marketing-context.md. - Sanitization: There is no evidence of sanitization or filtering applied to the content extracted from the codebase before it is used to populate the context document.
Audit Metadata