competitor-alternatives
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill body and referenced templates reveals no malicious behavior, command execution, or network activity. The skill's primary function is to guide the agent in structuring marketing copy based on user-provided data and internal context files.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a mechanism to read context from external files located in hidden directories, which represents a potential surface for indirect prompt injection if those files are attacker-controlled. 1. Ingestion points: Reads context from .agents/product-marketing-context.md and .claude/product-marketing-context.md. 2. Boundary markers: None present to differentiate context data from instructions. 3. Capability inventory: Limited to text generation; no high-risk capabilities like network access or shell execution are present. 4. Sanitization: No sanitization is performed on the ingested content.
Audit Metadata