co-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and prioritize information from local project files such as .agents/product-marketing.md. This creates a vulnerability surface for indirect prompt injection if these files are sourced from an untrusted repository.
- Ingestion points: Referenced context files in SKILL.md include .agents/product-marketing.md, .claude/product-marketing.md, and product-marketing-context.md.
- Boundary markers: Absent; no delimiters or explicit instructions are provided to the agent to distinguish between context data and system instructions within these files.
- Capability inventory: The skill itself is purely informational and does not define or use high-risk tools like network access, file writing, or command execution.
- Sanitization: Absent; the ingested content is not validated, filtered, or escaped before being added to the prompt context.
Audit Metadata