paw-ps-audience
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external markdown files within the project directory to inform its audience analysis, representing a vulnerability surface for indirect instructions. * Ingestion points: The skill reads context from curated/product-context.md, curated/audience-intelligence.md, and curated/market-intelligence.md as specified in SKILL.md. * Boundary markers: Absent; there are no specific instructions or delimiters to isolate or ignore potentially malicious content within the ingested files. * Capability inventory: The skill is restricted to file read and write operations within the .pawbytes/ directory as defined in SKILL.md; it lacks network access, subprocess execution, or arbitrary code evaluation capabilities. * Sanitization: Absent; the instructions in SKILL.md do not include methods for validating, escaping, or filtering the content of the external files before processing.
Audit Metadata