gtm-materials-plan
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Notion pages and local configuration files to perform its analysis, which introduces a potential surface for indirect prompt injection.
- Ingestion points: Data is retrieved from Notion pages corresponding to steps 2 through 9 of the GTM flow, as well as the local file path "${CLAUDE_PLUGIN_ROOT}/reference/agency-stages.md".
- Boundary markers: The instructions do not define clear delimiters or provide the agent with specific guidance to ignore instructions that might be embedded within the ingested data.
- Capability inventory: The skill is capable of reading local file system paths and executing read/write operations within a Notion workspace.
- Sanitization: There is no documentation of sanitization, filtering, or validation procedures for the content retrieved from external sources before it is interpreted by the agent.
Audit Metadata