product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local codebase (e.g., README, landing pages, marketing copy, and package.json) to automatically draft a marketing context document. This process involves processing untrusted external data that could contain hidden instructions intended to influence the agent's behavior.
- Ingestion points: The skill reads various repository files during the 'Auto-draft from codebase' workflow in
SKILL.md. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' instructions for the agent when it reads and summarizes the analyzed files.
- Capability inventory: The skill's capabilities are limited to reading local files and writing the generated document to
.claude/product-marketing-context.md. It does not have network access or the ability to execute arbitrary shell commands. - Sanitization: No specific sanitization, filtering, or validation of the content read from the repository files is mentioned.
Audit Metadata