email-sequence
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation, strategies, and templates for email marketing. There is no executable code, script, or binary included.
- [INDIRECT_PROMPT_INJECTION]: The skill contains instructions to read a local file
.claude/product-marketing-context.mdto gather context about the user's product. This represents an ingestion point for potentially untrusted data. However, the skill lacks any dangerous capabilities (such as file writing, command execution, or network operations) that could be exploited by an injection in that file. - Ingestion points:
.claude/product-marketing-context.md(referenced inSKILL.md) - Boundary markers: None identified.
- Capability inventory: No executable capabilities found across files.
- Sanitization: No explicit sanitization of context file content.
- [SAFE]: References to external tools such as Mailchimp, SendGrid, and Resend are provided as informational links to internal integration guides and well-known services. No actual software installation or unauthorized network access occurs within the skill files.
Audit Metadata