strategic-planning-startup-mentor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional text for business mentoring. It does not contain executable scripts, shell commands, or tool access, and no evidence of persistence, obfuscation, or privilege escalation was found.
- [EXTERNAL_DOWNLOADS]: The file
references/opb-methodology.mdcontains multiple URLs to informational articles onft07.comrelated to the 'One Person Business' methodology. These are static resources for user reference and do not involve unverified package installation or automated script execution by the agent. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data via diagnostic questions about startup projects. Evidence chain: 1) Ingestion points: user responses to diagnostic questions in
SKILL.mdandreferences/consulting-frameworks.md. 2) Boundary markers: absent. 3) Capability inventory: none (the skill has no enabled tools or shell access). 4) Sanitization: absent. The lack of functional capabilities mitigates the risk of this injection surface.
Audit Metadata