social-content
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions for social media strategy and does not contain any executable scripts, shell commands, or network operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection through data ingestion.\n
- Ingestion points: The instructions direct the agent to read local context from
.agents/product-marketing-context.mdor.claude/product-marketing-context.md(specified inSKILL.md).\n - Boundary markers: The skill does not define specific delimiters for this external content.\n
- Capability inventory: No high-risk capabilities such as subprocess execution, network access, or file-system writing are present in the skill.\n
- Sanitization: There are no explicit instructions for sanitizing or escaping the content read from the context files.\n
- Conclusion: While the skill ingests external data, the absence of exploitable tools or capabilities mitigates the risk of indirect prompt injection.
Audit Metadata