referral-program
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely documentation-based, providing growth marketing frameworks and templates. It does not contain code, scripts, or operational tools.
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates an ingestion point for local product marketing context files. While this creates a theoretical surface for indirect prompt injection, the agent's capabilities in this skill are limited to text generation, posing no significant security risk.
- Ingestion points: SKILL.md (reads
.agents/product-marketing-context.mdor.claude/product-marketing-context.md) - Boundary markers: Absent
- Capability inventory: None; the skill lacks tools for network access, file writing, or command execution.
- Sanitization: Absent
Audit Metadata