business-growth-skills
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides business templates and analytical tools with no evidence of malicious intent, obfuscation, or data exfiltration. All operations are local and deterministic.
- [INDIRECT_PROMPT_INJECTION]: The analytics scripts ingest external JSON data provided by the user, creating a surface for potential indirect prompt injection. 1. Ingestion points: JSON input files for all scripts in the scripts/ directories. 2. Boundary markers: Absent. 3. Capability inventory: Limited to standard library data processing; no subprocess, exec, or network capabilities. 4. Sanitization: Standard JSON parsing via the json module.
- [COMMAND_EXECUTION]: The documentation includes standard shell command examples for running the Python tools and system package installation instructions for pandoc, which are consistent with the skill's purpose.
Audit Metadata