popup-cro
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read an external context file (
.claude/product-marketing-context.md) if it exists to gather background information before providing recommendations.\n - Ingestion points: Found in the 'Initial Assessment' section, where the agent is instructed to read the marketing context file.\n
- Boundary markers: The skill lacks explicit delimiters or instructions to treat the content of the context file as untrusted data.\n
- Capability inventory: The skill is purely informational and does not possess capabilities such as network access, file system modification, or command execution.\n
- Sanitization: The skill does not define any validation or sanitization procedures for the data read from the external file.
Audit Metadata