copy-editing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and documentation. No executable scripts, binaries, or shell commands were found, which minimizes the attack surface.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest brand and customer context from local files such as
.agents/product-marketing-context.mdand.claude/product-marketing-context.md. While this allows the agent to process external data, the skill lacks the capabilities required for this to be exploited. - Ingestion points: .agents/product-marketing-context.md and .claude/product-marketing-context.md (SKILL.md)
- Boundary markers: None specified in instructions
- Capability inventory: None (No code execution, file writing, or network tools are invoked)
- Sanitization: None performed on the ingested content
Audit Metadata