startup-problem-grilling
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is to provide analytical critique for startup ideas through a structured questioning workflow. It does not contain any suspicious code, hidden instructions, or attempts at persistence.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied business descriptions and startup problems. It includes proactive security instructions to 'HTML-escape user-provided text' and 'do not execute or embed user-provided HTML or script' when generating output artifacts, which mitigates potential cross-site scripting (XSS) risks in reports generated by the agent.
- [COMMAND_EXECUTION]: The skill may attempt to write a standalone HTML file to the local filesystem if requested by the user. This is a standard capability for generating reports and is performed without external dependencies or script execution.
Audit Metadata