popup-cro
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or dangerous command executions were detected. The skill instructions are limited to natural language marketing advice.
- [PROMPT_INJECTION]: The skill contains a pattern for indirect prompt injection by instructing the agent to read marketing context from external files.
- Ingestion points: Reads data from
.agents/product-marketing-context.mdor.claude/product-marketing-context.mdas specified in the Initial Assessment section of SKILL.md. - Boundary markers: Absent; the skill does not define delimiters to separate ingested content from instructions.
- Capability inventory: The skill possesses no dangerous capabilities such as file writing, network access, or shell execution.
- Sanitization: Absent; the skill does not provide instructions for sanitizing or escaping the content of the marketing context file.
Audit Metadata