pricing
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface due to its data ingestion practices.
- Ingestion points: The instructions direct the agent to read business context from external files such as
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md(specified inSKILL.md). - Boundary markers: The skill lacks explicit instructions for the agent to use boundary markers or to ignore instructions embedded within the ingested data.
- Capability inventory: No high-risk capabilities such as subprocess execution, network operations, or file-writing tools were found in the provided skill components.
- Sanitization: The skill does not define any validation or sanitization logic for the data read from project files.
Audit Metadata