pricing
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from project context files (e.g., .agents/product-marketing.md) and user-provided business details.
- Ingestion points: Processes external files like .agents/product-marketing.md and user-supplied answers to business context questions in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the ingested data are present.
- Capability inventory: The skill does not possess any executable capabilities such as shell command execution, file writing, or network operations.
- Sanitization: No sanitization or validation of the ingested context data is performed before processing.
- [NO_CODE]: The skill consists entirely of markdown instructions and reference files without any executable scripts or binary dependencies.
Audit Metadata