pricing-strategist
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a local business analysis tool and does not exhibit any malicious behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON files (brief.json, survey.json, features.json) which introduces a minor attack surface.
- Ingestion points: scripts/pricing_model_picker.py, scripts/wtp_analyzer.py, and scripts/packaging_designer.py read data from input files via json.loads.
- Boundary markers: Output is formatted in Markdown but lacks specific delimiters to isolate external content from the model's instructions.
- Capability inventory: All scripts are deterministic and do not have access to file writing, network operations, or shell execution capabilities.
- Sanitization: No explicit sanitization or validation of the input strings is performed before they are echoed in the markdown output.
Audit Metadata