signup
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the instructions or evaluation files.
- [NO_CODE]: The skill consists entirely of markdown instructions and evaluation data. It does not include scripts, binaries, or automated tasks that could execute code or modify the system.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by instructing the agent to read external project context files (e.g.,
.agents/product-marketing.md). - Ingestion points: The skill reads local context files such as
.agents/product-marketing.mdand.claude/product-marketing.md(specified in SKILL.md). - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the content read from these files.
- Capability inventory: The skill does not possess any dangerous capabilities; it lacks network access, file writing tools, and command execution functionality.
- Sanitization: No sanitization or filtering is applied to the content retrieved from external context files.
Audit Metadata