email-sequence

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read from .claude/product-marketing-context.md if it exists. While this is an ingestion point for external data, the skill is limited to text generation and strategy planning, lacking any dangerous capabilities (like file writing or network requests) that would make indirect injection a high risk.
  • [COMMAND_EXECUTION]: No shell commands, system calls, or script execution patterns were found in the skill or its reference files.
  • [DATA_EXFILTRATION]: There are no network operations or sensitive file access patterns detected. The mentions of email tools like Mailchimp and SendGrid are provided as informational links to implementation guides.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or other credentials were found. The skill correctly refers to external documentation for tool integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:56 PM