popup-cro

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or dangerous command executions were detected. The skill instructions are limited to natural language marketing advice.
  • [PROMPT_INJECTION]: The skill contains a pattern for indirect prompt injection by instructing the agent to read marketing context from external files.
  • Ingestion points: Reads data from .agents/product-marketing-context.md or .claude/product-marketing-context.md as specified in the Initial Assessment section of SKILL.md.
  • Boundary markers: Absent; the skill does not define delimiters to separate ingested content from instructions.
  • Capability inventory: The skill possesses no dangerous capabilities such as file writing, network access, or shell execution.
  • Sanitization: Absent; the skill does not provide instructions for sanitizing or escaping the content of the marketing context file.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 03:36 PM