marketing-ideas
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external workspace files to gain product context, which presents an attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed in
SKILL.mdto read.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.mdbefore proceeding with recommendations. - Boundary markers: The instructions do not define clear delimiters or provide instructions for the agent to ignore commands or formatting overrides that might be present within these context files.
- Capability inventory: The skill itself focuses on text-based recommendations, but it functions within an agent environment that typically possesses broader filesystem and execution capabilities.
- Sanitization: No sanitization, validation, or filtering of the ingested context file content is performed before the agent processes it.
Audit Metadata