sms
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown and YAML documentation. It does not contain any executable scripts, binaries, or shell commands, minimizing the risk of direct technical exploitation.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest business context from local files (e.g.,
.agents/product-marketing.md). While this represents a data ingestion surface where external content could influence the agent, it is a standard design pattern for providing task-specific context and is used here for legitimate marketing grounding. - [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted industry platforms such as Klaviyo, Twilio, Postscript, and Attentive. These references are purely informational for the user's implementation strategy and do not involve unauthorized network operations or unverifiable code execution.
Audit Metadata