referral-program

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is entirely documentation-based, providing growth marketing frameworks and templates. It does not contain code, scripts, or operational tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill incorporates an ingestion point for local product marketing context files. While this creates a theoretical surface for indirect prompt injection, the agent's capabilities in this skill are limited to text generation, posing no significant security risk.
  • Ingestion points: SKILL.md (reads .agents/product-marketing-context.md or .claude/product-marketing-context.md)
  • Boundary markers: Absent
  • Capability inventory: None; the skill lacks tools for network access, file writing, or command execution.
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:12 PM