knowledge-base-for-startups
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes a large corpus of external-facing educational content in the
references/directory. While this provides an attack surface for indirect prompt injection, the skill includes explicit defensive instructions in theSKILL.mdfile to treat this content strictly as factual data and ignore any embedded directives. Furthermore, the skill lacks dangerous capabilities such as arbitrary command execution, file writing, or network operations that could be exploited via injection. - [TIME_DELAYED_CONDITIONAL]: The skill contains logic to compare the 'Last updated' date against the current date to surface a reminder to the user to update the skill if the content is older than six months. This is a benign user experience feature and does not gate any malicious payloads.
- [EXTERNAL_DOWNLOADS]: The skill references numerous official AWS domains (aws.amazon.com, startups.aws) and reputable startup partner sites (Airtable, Brex, Carta, etc.) for further reading and offer redemption. All primary resource links point to the trusted AWS/Amazon ecosystem.
- [NO_CODE]: This skill consists entirely of Markdown files and YAML frontmatter. There are no Python scripts, Node.js packages, or executable binaries included in the distribution.
Audit Metadata