onboarding-cro
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project-specific context files (e.g.,
.agents/product-marketing-context.md). While this is a data ingestion surface, it is a standard practice for personalizing AI agent behavior within a workspace and does not involve executing commands or making network requests based on that data. - Ingestion points:
.agents/product-marketing-context.md,.claude/product-marketing-context.md. - Boundary markers: Absent.
- Capability inventory: The skill is limited to providing text-based analysis and recommendations. No subprocess calls, file-write operations, or network requests are present in the provided files.
- Sanitization: Absent.
Audit Metadata