landing-page
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external marketing context from specific local files such as
.agents/product-marketing.mdto personalize the landing page copy. - Ingestion points: The skill reads from
.agents/product-marketing.md,.agents/product-marketing-context.md, or.claude/product-marketing-context.md(defined inSKILL.md). - Boundary markers: There are no explicit instructions to ignore potentially malicious content within these context files.
- Capability inventory: The skill's capabilities are limited to Markdown text generation. It does not possess capabilities for file writing, network communication, or shell command execution.
- Sanitization: The skill does not implement sanitization or validation logic for the content read from the context files.
Audit Metadata