opportunity-solution-tree
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data such as customer interview transcripts, support tickets, and analytics to populate the Opportunity Solution Tree.
- Ingestion points: Instructions in
SKILL.mdandreferences/ost-anti-patterns.mddescribe pulling content from interviews, tickets, and behavioral analytics. - Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from following instructions embedded within the processed research data.
- Capability inventory: The skill primarily generates text-based trees and executes a local validation script
scripts/ost_validator.pyon a provided JSON input. - Sanitization: There are no explicit filtering or sanitization steps mentioned for the ingested customer evidence.
- [COMMAND_EXECUTION]: The skill provides instructions to run a local Python script
scripts/ost_validator.pyto audit the structure and quality of the generated tree. - Evidence:
SKILL.mdcontains a bash snippet for executing the script usingpython3with arguments for input files and output format. - Analysis: The provided source code for
scripts/ost_validator.pywas audited and found to contain only standard library imports and functional validation logic (JSON parsing, date checking, and string matching). It does not perform network operations, subprocess calls, or dynamic code execution.
Audit Metadata