algo-price-dynamic
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data streams, including real-time demand signals (searches, bookings) and competitive prices. This creates a surface where malicious actors could attempt to inject instructions into these data feeds to manipulate pricing outcomes or influence the agent's reasoning.
- Ingestion points: Data flows for demand indicators, inventory status, and competitive prices are defined in the algorithm's Phase 1 (Input Validation) in
SKILL.mdand detailed in the scenario inexamples/sample_scenario.md. - Boundary markers: While the skill defines an 'Input Validation' gate and business rules, it lacks specific instructions for the agent to treat external strings as untrusted data or to ignore embedded natural language instructions.
- Capability inventory: The skill provides reference Python implementations for statistical calculations in
references/revenue-management.mdbut does not request dangerous system capabilities like direct file writing or network exfiltration. - Sanitization: The skill recommends manual gates and business rule validation but does not detail specific sanitization or escaping techniques for handling the ingested external data.
Audit Metadata