pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external web sources via
WebSearchandWebFetchto analyze competitors, and reads multiple local files from thefounder/directory. This creates a surface for Indirect Prompt Injection if the ingested content contains adversarial instructions. - Ingestion points:
founder/facts.md,founder/product-brief.md,founder/competitor-matrix.md, and results from web search/fetch tools. - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious commands within the fetched or read data.
- Capability inventory: The agent is granted
Edit(founder/**)permissions, allowing it to write the resulting strategy to a file, which could be exploited if an injection occurred. - Sanitization: No explicit sanitization or validation of external web content or local file data is performed before processing.
Audit Metadata