community-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external context files, which could contain malicious instructions intended to manipulate the agent's behavior.
- Ingestion points: The agent is directed to read .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md to gather product context as described in SKILL.md.
- Boundary markers: The skill lacks delimiters or warnings to ignore potentially malicious embedded instructions within these external files.
- Capability inventory: The skill primarily generates marketing strategy and advice; it does not explicitly call for high-privilege operations like arbitrary command execution, network exfiltration, or unauthorized file writes.
- Sanitization: No sanitization, validation, or filtering mechanisms are prescribed for the content ingested from the product marketing files.
Audit Metadata