product-marketing-context

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs routine file system operations, specifically reading from and writing to the .agents/ and .claude/ directories to manage marketing context documents. These operations are aligned with the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from the local codebase (e.g., README, landing pages) to auto-draft documentation. This introduces a surface for indirect prompt injection if those files contain malicious instructions.
  • Ingestion points: Files like README.md, package.json, and marketing copy files are read by the agent.
  • Boundary markers: Not explicitly defined in the prompts, though the draft is presented to the user for manual review.
  • Capability inventory: File read and write operations within the project directory.
  • Sanitization: The skill relies on user review of the generated draft to catch errors or unwanted content before saving.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 04:29 AM