stelow-product-multi-method-market-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it is designed to ingest and process data from external, untrusted web sources such as social media (LinkedIn, X, Reddit) and company blogs.
- Ingestion points: External research content fetched via the
web-research.mdtool referenced in SKILL.md. - Boundary markers: The skill provides structured templates and specific Markdown headers to organize the analysis output.
- Capability inventory: The skill performs web research and generates reports; it does not have access to sensitive local files or system configuration.
- Sanitization: No explicit content sanitization or instruction-filtering logic is defined in the prompt instructions.
- [COMMAND_EXECUTION]: The skill references the use of local scripts and environment variables to manage state within a workflow.
- Evidence: Mentions calling
scripts/stelow nextandscripts/stelow advancefor workflow transitions. - Context: These tools are part of the
stelow-workflow-orchestratorsuite, which is a resource associated with the skill's author, and are used for intended orchestration purposes.
Audit Metadata