free-tools
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest content from external project files to gain business context, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill attempts to read
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.mdfrom the local environment. - Boundary markers: No delimiters or instructions to ignore embedded commands are present when reading these files.
- Capability inventory: The skill itself does not define dangerous subprocess calls, network operations, or file writes, limiting the potential impact of an injection.
- Sanitization: There is no evidence of content sanitization or validation for the ingested files before they are processed by the agent.
Audit Metadata