email-sequence
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest data from .agents/product-marketing-context.md or .claude/product-marketing-context.md to establish context before performing tasks. This creates a surface where malicious instructions embedded in those context files could influence the agent's behavior.
- Ingestion points: The files .agents/product-marketing-context.md and .claude/product-marketing-context.md as mentioned in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the context file ingestion.
- Capability inventory: The skill primarily generates text content (email copy) and provides guidance on using external tools like Mailchimp and Resend via MCP integrations.
- Sanitization: No sanitization or validation logic is defined for the external context data.
Audit Metadata