grounded-product-copy
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: This skill consists entirely of instructional markdown and evaluation data. It does not include any executable scripts, binaries, or remote dependencies, which significantly minimizes the attack surface.\n- [SAFE]: The instructions are designed to prevent AI hallucinations by grounding the agent's output in factual project data (README, PRODUCT.md, source code). This is a legitimate and secure instructional pattern for marketing copy generation.\n- [PROMPT_INJECTION]: The skill ingests untrusted content from project files (Category 8: Indirect Prompt Injection) to inform its summaries. This represents a standard functional surface for documentation-based tasks and is considered safe given the skill's restricted scope.\n
- Ingestion points: Reads
PRODUCT.md,README.md, and project source code as specified inSKILL.md.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present.\n
- Capability inventory: The agent performs local file reads and may write or create a
PRODUCT.mdfile; no arbitrary command execution or network exfiltration is requested.\n - Sanitization: No input sanitization or validation of the ingested file content is performed.
Audit Metadata