opc-business-model-design
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from previously generated files located in
opc-doc/outputs/02-niche-positioning/andopc-doc/outputs/03-value-proposition/. While this introduces a surface for indirect instructions, the skill requires explicit user verification of all outputs before writing them to the file system, providing a robust human-in-the-loop control. The capability is restricted to business modeling logic within the designated project directory. - [COMMAND_EXECUTION]: The skill utilizes file system tools to create and update markdown and JSON files within the
opc-doc/directory. This behavior is the primary intended function of the skill—documenting business decisions and maintaining project state—and does not involve arbitrary or dangerous command execution.
Audit Metadata