cpq-builder

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill defines structural patterns and logical flows for generating CPQ application configurations. It focuses on user interface components, business rule mapping, and role-based access control within a specific framework. No malicious instructions, unauthorized network operations, or sensitive data exposure patterns were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external domain-specific data (DOMAIN.md) to drive the generation of application logic and user interfaces. This is an inherent part of the skill's purpose to build customized tools. 1. Ingestion points: The agent reads the DOMAIN.md file to extract entities, products, pricing logic, and stakeholder maps. 2. Boundary markers: The skill provides deterministic mapping rules and a strict TypeScript schema (references/config-schema.md) to constrain how the agent interprets and structures the ingested data. 3. Capability inventory: The skill's primary capability is generating a JSON configuration file for a single-page application (SPA). It does not perform arbitrary shell execution or make network requests based on the ingested content. 4. Sanitization: The skill relies on the agent's mapping process to translate natural language into structured configuration data, effectively sanitizing the input against the required application schema.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 09:29 AM