investor-research

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured templates and a process for investor discovery and due diligence. It contains no executable scripts, network requests, or hidden commands.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided company data (metrics, traction, status) to generate scores and briefs. While it does not use explicit delimiters to separate this data from the instructions in SKILL.md, the skill does not have any dangerous capabilities such as shell access, file writing, or network tools that could be exploited via injection.
  • [DATA_EXPOSURE]: The skill prompts for sensitive company information including ARR, burn rate, and valuation within SKILL.md. While necessary for the intended purpose of fundraising research, this represents a concentration of sensitive data within the agent session context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 05:39 AM