lead-magnets
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code or suspicious patterns were detected. The skill is entirely composed of instructional content and strategic guidelines for marketing.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or shell commands. It functions strictly as a knowledge base and prompt template for the AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an instruction to ingest external context from project files, creating a potential attack surface.
- Ingestion points: Reads marketing context from
.agents/product-marketing.md,.claude/product-marketing.md, orproduct-marketing-context.md(found inSKILL.md). - Boundary markers: Absent; the agent is instructed to read the content directly without explicit delimiters or warnings to ignore embedded instructions.
- Capability inventory: None; the skill lacks any capabilities for command execution, network access, or file-system modification, rendering the risk negligible.
- Sanitization: Absent.
Audit Metadata