stelow-product-multi-method-market-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it is designed to ingest and process data from external, untrusted web sources such as social media (LinkedIn, X, Reddit) and company blogs.
  • Ingestion points: External research content fetched via the web-research.md tool referenced in SKILL.md.
  • Boundary markers: The skill provides structured templates and specific Markdown headers to organize the analysis output.
  • Capability inventory: The skill performs web research and generates reports; it does not have access to sensitive local files or system configuration.
  • Sanitization: No explicit content sanitization or instruction-filtering logic is defined in the prompt instructions.
  • [COMMAND_EXECUTION]: The skill references the use of local scripts and environment variables to manage state within a workflow.
  • Evidence: Mentions calling scripts/stelow next and scripts/stelow advance for workflow transitions.
  • Context: These tools are part of the stelow-workflow-orchestrator suite, which is a resource associated with the skill's author, and are used for intended orchestration purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 03:00 AM