bfs-master-bp-review
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided business documents (e.g., pitch decks, memos) which constitutes an indirect prompt injection surface. A malicious document could attempt to influence the agent's output or the final report content.
- Ingestion points: The agent reads user-provided documents via a Read tool to perform its analysis, as described in
SKILL.mdunder the 'How to Execute' section. - Boundary markers: There are no explicit instructions or delimiters mentioned to isolate untrusted document content from the agent's core instructions.
- Capability inventory: The skill includes the capability to write a report file to the local working directory (
bp-review-{project-name}-{YYYYMMDD-HHMMSS}.md). - Sanitization: The instructions do not define sanitization or validation logic for the content extracted from user documents before it is interpolated into the generated report.
Audit Metadata