product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates by reading existing project documentation (README, landing pages, package.json) to automate the drafting of a marketing context document. These are standard, non-sensitive file access operations within the repository scope.
- [SAFE]: No evidence of hardcoded credentials, sensitive file access (like .env or .ssh), or data exfiltration via network calls was found. All file operations are localized to reading project docs and writing to .agents/product-marketing-context.md.
- [SAFE]: The skill does not use any executable code, remote script downloads, or dynamic execution patterns. It relies entirely on large language model (LLM) reasoning to process text and generate documentation.
- [PROMPT_INJECTION]: There is a theoretical risk of indirect prompt injection (Category 8) because the skill reads content from the codebase which could be attacker-controlled. However, the risk is negligible as the skill lacks dangerous capabilities (like code execution or network access) that could be exploited by such an injection, and its output is a static markdown document meant for human review.
- [DATA_EXFILTRATION]: There are no network-capable commands or tools referenced that would allow for the exfiltration of the analyzed data.
Audit Metadata