marketing-plan-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill demonstrates high-quality professional standards for marketing planning and research. It emphasizes evidence discipline and provides structured workflows that do not involve malicious behaviors.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data, such as CRM records, sales data, and customer survey responses. This presents a potential surface for indirect prompt injection, which the skill mitigates through a dedicated Evidence Discipline module and a Quality Gate that mandates source verification. Ingestion points include CRM and survey data referenced in SKILL.md and references/marketing-decision-workpapers.md. The evidence classification system acts as a logical boundary, and the quality gate scoring rubric ensures data validation and sanitization.
- [EXTERNAL_DOWNLOADS]: The skill references strategic frameworks and research standards from well-known organizations including Bain & Company, McKinsey & Company, the U.S. Small Business Administration, and ESOMAR. These are professional references and do not represent a security risk.
- [COMMAND_EXECUTION]: The skill mentions a local utility script, tools/objective-check/check_objectives.py, for validating SMART objectives. This is a functional reference for internal verification and does not involve arbitrary command execution or remote script downloads.
Audit Metadata