analytics
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of documentation, naming conventions, and implementation examples for analytics tools. It does not include any executable scripts, shell commands, or network operations.- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read local context files to inform its responses, which represents a standard but low-risk attack surface.
- Ingestion points: Reads
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md(referenced in SKILL.md). - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided for these context files.
- Capability inventory: No active capabilities such as file-writing, network operations, or command execution are present in the skill.
- Sanitization: No sanitization or validation of the context file content is performed.
- Note: This ingestion is used for background context and carries negligible risk due to the lack of exploitable capabilities.
Audit Metadata