go-to-market
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill aggregates data from several local files which serves as a potential vector for indirect prompt injection.
- Ingestion points: The skill reads configuration and context from
founder/facts.md,founder/product-brief.md,founder/persona-gen.md,founder/competitor-matrix.md,founder/pricing-strategy.md, andfounder/mvp-scope.mdinSKILL.md. - Boundary markers: The instructions do not define clear delimiters or include safety warnings to ignore instructions found within the ingested data files.
- Capability inventory: The skill utilizes
WebSearch,WebFetch, andEdit(founder/**)tools, allowing it to interact with the internet and modify local files within the scoped directory. - Sanitization: No sanitization or validation logic is present to filter out executable instructions or malicious patterns in the ingested text.
Audit Metadata