onboarding
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown-based instructions and reference material. No shell commands, scripts, or binary files are included.
- [SAFE]: No network activity or external data exfiltration patterns were identified.
- [PROMPT_INJECTION]: The skill instructs the agent to ingest context from local product marketing documentation. While this creates a surface for indirect prompt injection, the lack of dangerous capabilities renders the risk negligible. Evidence chain: (1) Ingestion points: .agents/product-marketing.md, .claude/product-marketing.md, and product-marketing-context.md. (2) Boundary markers: Absent. (3) Capability inventory: No executable scripts, network tools, or file-writing capabilities exist in the skill. (4) Sanitization: Absent.
Audit Metadata