product-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a legitimate utility for product managers and developers to prioritize product assumptions using an Opportunity Solution Tree framework.
- [COMMAND_EXECUTION]: The skill references a local Python script
scripts/assumption_mapper.py. Analysis of the script shows it only uses the Python standard library (argparse,csv,dataclasses) to process input and output structured data. It performs no network operations, file writes, or privileged actions. - [INDIRECT_PROMPT_INJECTION]: The skill includes a surface for processing untrusted data through CSV files (
assumptions.csv) or inline CLI arguments. While this is an ingestion point for external content, the risk is negligible as the skill lacks any dangerous capabilities (network access, shell execution, or file system modifications) that could be exploited via injection.
Audit Metadata