marketing-ideas
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions in SKILL.md direct the agent to automatically read specific local files (.agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md) to establish context.
- Ingestion points: The agent is explicitly told to look for and read these files from the project workspace.
- Boundary markers: There are no instructions providing delimiters or warnings to treat the content of these context files as untrusted.
- Capability inventory: The agent uses standard file-reading tools and reasoning capabilities to process the context; no specialized high-risk tools are invoked.
- Sanitization: The skill lacks instructions for validating or sanitizing the content of the external context files.
Audit Metadata