launch-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is configured to ingest data from external context files (.agents/product-marketing-context.md or .claude/product-marketing-context.md) to guide its responses. This represents a potential vulnerability surface where malicious instructions within those files could influence agent behavior.
- Ingestion points: Detected in SKILL.md where the agent is instructed to read local product marketing context files before responding.
- Boundary markers: The instructions do not define specific boundary markers or delimiters to separate the ingested context from the agent's core instructions.
- Capability inventory: No dangerous capabilities such as arbitrary command execution, network exfiltration, or file system writing were detected in the skill's instructions or metadata.
- Sanitization: The skill does not implement validation or sanitization of the content read from the external context files.
Audit Metadata