fundraise-prep
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses
WebSearchandWebFetchto research valuation data and investor lists. If the agent visits a malicious website during this process, embedded instructions could influence the agent's behavior. - Ingestion points: External content retrieved via
WebFetchand startup-specific documents in thefounder/directory (facts.md,metrics-dashboard.md, etc.). - Boundary markers: The skill does not define explicit delimiters or instructions to ignore commands within processed data.
- Capability inventory: The agent has permissions to
Read,Edit(scoped tofounder/**),WebSearch, andWebFetch. - Sanitization: No sanitization logic or content filtering is described for handling external web content before it enters the context.
Audit Metadata