markets
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through its reliance on external project data.
- Ingestion points: The skill reads various JSON files from the project workspace, including
portfolio.json,products/*.json,features/*.json,markets/*.json,customers/*.json, andpropositions/*.jsonto derive consulting insights. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within these data files are provided in the skill instructions.
- Capability inventory: The skill can modify project files using
Write/Edittools, execute local scripts viaBash, and initiate specialized research tasks using theAgenttool. - Sanitization: There are no explicit validation or sanitization steps mentioned for the data ingested from the project JSON files.
- [COMMAND_EXECUTION]: The skill executes local bash scripts to perform structural project operations.
- Utility Script Invocations: It uses scripts such as
cascade-rename.sh,validate-entities.sh, andproject-status.shto maintain consistency across the project portfolio. - Dynamic Path Resolution: The skill resolves the location of these scripts using a shell expansion pattern (
${CLAUDE_PLUGIN_ROOT:-$(ls -td "$HOME"/.claude/plugins/cache/insight-wave/cogni-portfolio/*/ | head -1)}) to ensure compatibility with various installation environments.
Audit Metadata