deal-signals

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill processes external, untrusted communication channels such as emails and meeting transcripts while maintaining capabilities to suggest CRM updates, outreach drafts, and meeting schedules.
  • Ingestion Points: External communication data, including emails, chat logs, and transcripts, are scanned during the deal analysis phase in SKILL.md.
  • Boundary Markers: The instructions explicitly mandate that external content must be treated strictly as data rather than instructions, requiring the agent to report any instruction-like text rather than executing it.
  • Capability Inventory: The skill proposes actions via update-opportunity, draft-outreach, and schedule-meeting tools based on the analyzed data.
  • Sanitization & Verification: Content-originated actions require explicit user confirmation showing recipients and content before execution, and the rendering of links found within untrusted text is prohibited.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:04 PM
Security Audit — agent-trust-hub — deal-signals