revops
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation, JSON evaluation files, and reference templates. There are no scripts, binaries, or active execution patterns that pose a security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest project context from external files like
.agents/product-marketing.md. This creates a theoretical surface where untrusted data in those files could influence agent behavior, although the skill lacks any active capabilities to exploit this data. - Ingestion points:
SKILL.md(instructions to read.agents/product-marketing.mdand variants). - Boundary markers: None present.
- Capability inventory: None. The skill includes no scripts for network operations, file system modification, or process execution.
- Sanitization: Not applicable as the skill only provides instructions and contains no data processing logic.
Audit Metadata