porters-five-forces
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts untrusted data through the
$ARGUMENTSplaceholder to define the subject of the analysis. However, the risk is negligible as the skill lacks exploitable capabilities. - Ingestion points: The industry or company name is interpolated into the system prompt via
$ARGUMENTSinSKILL.md. - Boundary markers: There are no specific delimiters or warnings to the model to ignore potential instructions embedded within the
$ARGUMENTStext. - Capability inventory: The skill defines no
allowed-toolsand contains no code or scripts (No-Code skill). - Sanitization: No explicit sanitization or filtering is applied to the input variable.
- [SAFE]: The skill is purely instructional and provides a framework for business analysis. It does not attempt to access the file system, manage credentials, or perform unauthorized network communications.
Audit Metadata