product-marketing
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a workflow to 'auto-draft from codebase' which scans repository files (README, package.json, landing pages, marketing copy) to generate a marketing context document. This creates a surface where malicious instructions embedded in those project files could influence the agent's behavior during the drafting process.
- Ingestion points: The agent reads multiple files within the local repository, including README.md, package.json, and various marketing or documentation files.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' prompts when processing the content of these scanned files.
- Capability inventory: The skill has the capability to read local files and write a new context document to the
.agents/product-marketing.mdpath. - Sanitization: No explicit sanitization, filtering, or validation of the content read from the codebase is described before it is used to interpolate the draft document.
Audit Metadata