skills/phoenixtw/skills/onboarding/Gen Agent Trust Hub

onboarding

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [SAFE]: The skill is primarily composed of natural language instructions and static reference documents in Markdown format. No malicious behavior, obfuscation, or unauthorized data access was detected across the 6 analyzed files.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to ingest external context from the project environment, creating a potential surface for indirect influence.
  • Ingestion points: Reads product marketing context from files such as .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md in the user's repository.
  • Boundary markers: The instructions do not specify the use of delimiters or protective warnings when processing these files.
  • Capability inventory: The skill is focused on generating marketing recommendations and does not request or utilize tools for shell execution, network exfiltration, or filesystem modification.
  • Sanitization: There are no explicit validation or sanitization steps mentioned for the content retrieved from external context files.
  • [NO_CODE]: The skill does not contain any executable scripts, shell commands, or dynamic execution patterns. It relies entirely on the agent's reasoning capabilities based on the provided instructional text and local references.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 06:18 AM