tam-building
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests company metadata (name, domain, industry, description) from an external integration and processes it via an LLM agent to determine tiers.
- Ingestion points: External data is ingested in
infra/plays/tier-companies.tsand passed to thetierAnalystagent. - Boundary markers: The agent is constrained by a system prompt and a strict JSON schema for output in
infra/agents/tier-analyst.ts. - Capability inventory: The agent has access to
webSearchandcontextcapabilities; the workflow ininfra/plays/tier-companies.tsperforms file writes viamodelCustomColumn. - Sanitization: The skill does not implement explicit sanitization or escaping for the interpolated company data strings.
- [DYNAMIC_EXECUTION]: The contract evaluation script uses dynamic loading to verify the skill's resource definitions.
- Evidence:
evals/contract.mjsutilizesawait import()with template literals to load local CDK resources for testing.
Audit Metadata