studio-define-offer-builder
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs live web research to gather market data and competitor information.
- Evidence: It fetches data from well-known services including Reddit, X (Twitter), ProductHunt, Indie Hackers, Starter Story, and Sacra to inform the product offer creation process.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and user inputs to modify local project files, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill reads user-provided product ideas, existing local documentation (e.g.,
1-Product-Offer.md,2-Customer-Persona.md), and live data retrieved from web research targets. - Boundary markers: The skill does not define specific delimiters or instructions to the agent to disregard instructions potentially embedded within the fetched external research data.
- Capability inventory: The agent performs network read operations for research and file write operations to update project documentation in place (
1-Product-Offer.md). - Sanitization: The skill lacks explicit sanitization or validation protocols for data retrieved from external platforms before it is integrated into the prompt context and written to files.
Audit Metadata