marketing-council
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a set of non-negotiable 'Grounding Rules' designed to prevent the AI from fabricating quotes or inventing endorsements. This is a safety best practice for persona-based simulations.
- [COMMAND_EXECUTION]: The skill instructions allow for a 'Live Research Pass' that can utilize external skills like
deep-research,watch-video, or standard web searches to find current information about advisors. This capability is scoped to the primary purpose of information gathering. - [DATA_EXFILTRATION]: The agent is instructed to read local project files such as
.agents/product-marketing.mdor.claude/product-marketing.mdto gain business context. This is a legitimate use of project data for personalized assistance and does not involve accessing sensitive system credentials or exfiltrating data to untrusted external domains. - [PROMPT_INJECTION]: The 'Add a Custom Advisor' feature facilitates the creation of new persona files based on user-supplied data or project files. This functionality represents an indirect prompt injection surface where a malicious dossier could attempt to influence the agent's behavior. However, the skill provides a strict template and instructions for the agent to interview the user rather than inventing content, which acts as a safeguard.
Audit Metadata