marketing-copywriting
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read external files such as
.agents/product-marketing.mdto gather product context. This represents an indirect prompt injection surface where malicious instructions could be embedded in those data files. - Ingestion points: The skill attempts to read
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md(SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present when reading these files.
- Capability inventory: The skill contains no dangerous capabilities such as network access, file writing, or command execution.
- Sanitization: No sanitization or validation of the external file content is performed.
- [REMOTE_CODE_EXECUTION]: The skill identifies an upstream source repository on GitHub in MIRROR.md. This reference to a well-known service is for tracking the skill's origin and does not involve the execution of untrusted remote code.
Audit Metadata