product-marketing-context
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or behaviors were detected. The skill performs standard file-based documentation tasks within the project repository.
- [PROMPT_INJECTION]: The skill ingests untrusted data from local codebase files (README, package.json, landing pages) to generate marketing summaries. While this represents a surface for indirect prompt injection—where instructions hidden in a README could influence the agent—this is an inherent risk of its primary function to provide context-aware drafting and is not considered a malicious design choice.
- Ingestion points: README, landing pages, marketing copy, package.json, about pages, meta descriptions.
- Boundary markers: Not explicitly instructed.
- Capability inventory: File system read access for repo files; File system write access to
.agents/product-marketing-context.md. - Sanitization: None specified for ingested file content.
Audit Metadata