improve-business
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to recommend shell commands to the user for installing external dependencies. Evidence: Operating Rule 4 in SKILL.md suggests the command 'npx skills add wondelai/skills/ --global' as a fallback installation method.
- [EXTERNAL_DOWNLOADS]: The skill references an external repository for additional capabilities that are not part of the core package or from a verified vendor. Evidence: The use of the 'wondelai/skills/' namespace for external skill installation.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of reading and processing local workspace files. 1. Ingestion points: Multiple files in the 'docs/' directory including STRATEGY.md, OPERATIONS.md, and IMPROVE-BUSINESS-PLAN.md. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when reading these files. 3. Capability inventory: The agent can invoke external skills and perform file system writes within the project directory. 4. Sanitization: No evidence of validation or filtering of content from the ingested files was found.
Audit Metadata