onboarding
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and evaluation test cases. It does not include any executable code, scripts, or network-enabled tools.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to read external context files for product marketing information. While this creates a potential surface for indirect prompt injection, the skill lacks the capabilities to perform any actions (such as file writes or network requests) that could be exploited through this vector. 1. Ingestion points: Reads
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md(identified inSKILL.md). 2. Boundary markers: None specified. 3. Capability inventory: No tool usage or script execution patterns found across provided files. 4. Sanitization: No specific sanitization measures mentioned for ingested context.
Audit Metadata