onboarding-cro
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected in the instructions, evaluation scripts, or reference documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill has a defined surface for processing external data, though it lacks the capabilities to perform dangerous actions.
- Ingestion points: The skill instructs the agent to read
.agents/product-marketing-context.mdor.claude/product-marketing-context.md(SKILL.md) to gain context before providing recommendations. - Boundary markers: Absent; the skill does not specify delimiters or "ignore embedded instructions" warnings for the context file.
- Capability inventory: None; the skill's functionality is limited to text-based analysis and recommendation generation. It does not perform subprocess calls, network operations, or file-writing tasks.
- Sanitization: Absent; no explicit sanitization or validation of the context file content is performed.
Audit Metadata