pricing
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to read external context files, which creates an indirect prompt injection surface if those files contain malicious instructions.
- Ingestion points: The agent is directed to read
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.mdif they exist. - Boundary markers: The instructions lack delimiters or explicit warnings to ignore any embedded instructions within these external files.
- Capability inventory: The skill is limited to providing pricing advice and does not include scripts, subprocess calls, or network operations.
- Sanitization: No sanitization or validation logic is defined for the content read from these context files.
Audit Metadata