maslow-five-needs-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting external, untrusted data such as product descriptions, audience profiles, and market context to generate marketing strategies and copy. This creates a surface for indirect prompt injection if the processed data contains malicious instructions meant to subvert the agent's behavior.
- Ingestion points: Data enters the context via the 'Input Contract' defined in
SKILL.mdand the 'Core Data' fields inreferences/01-intake-and-segmentation.md. - Boundary markers: Absent. The instructions do not specify delimiters or provide 'ignore embedded instructions' warnings for the data being processed.
- Capability inventory: The skill is restricted to text generation for strategies and copywriting; it does not utilize tools for network access, file system modifications, or shell execution.
- Sanitization: Absent. There is no evidence of input validation or escaping for the ingested content.
- [NO_CODE]: The skill consists solely of Markdown documentation and YAML configuration. It does not include Python scripts, Node.js packages, or any other executable files, significantly reducing the risk of traditional malware, persistence, or privilege escalation.
Audit Metadata