b2b-founder-roadmap
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from external, untrusted sources such as Reddit, LinkedIn, YouTube comments, Discord/Slack communities, and industry forums (Stage 2 — Customer Research). This data is processed by the agent to identify patterns and evidence, creating a surface for indirect prompt injection where malicious instructions embedded in public comments or posts could influence the agent's behavior.
- Ingestion points: External data gathered from web sources is incorporated into the agent's context and stored in roadmap artifacts such as
marketing/02-customer-research.md. - Boundary markers: The instructions do not specify the use of delimiters (e.g., XML tags or triple quotes) or explicit instructions to ignore potentially malicious content within the researched data.
- Capability inventory: The agent is instructed to read/write local files within the
marketing/directory and perform external research using web tools. - Sanitization: There are no instructions for sanitizing or filtering the content retrieved from external sources before it is analyzed or saved.
Audit Metadata