marketing-plan
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a comprehensive marketing strategy engine based on the AARRR framework, scientific budgeting, and established team-modeling principles. Its behavior is fully consistent with its stated purpose as a fractional CMO tool.- [EXTERNAL_DOWNLOADS]: The skill references integrations with well-known and trusted services, including Stripe, Shopify, Ahrefs, and Google Analytics. These connections are used for legitimate data retrieval through the Model Context Protocol (MCP) and official APIs to support marketing research and orchestration.- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted client materials from local directories. It mitigates this risk by requiring human-in-the-loop approval for each plan section and conducting a final 'FINALIZE' verification pass that checks for machine-specific paths and confirms voice alignment before output.- [COMMAND_EXECUTION]: The skill's operations are limited to reading and writing files within designated marketing-plan directories and utilizing specific project-management and marketing tools. It does not attempt to execute arbitrary shell commands, access sensitive system files, or gain unauthorized privileges.
Audit Metadata