funnel-planner
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a local bootstrap script
scripts/bootstrap-experience.tsto initialize the.agents/experience/directory structure. The script is designed to create append-only markdown files for storing project context. It includes security checks usinglstatSyncto ensure it does not operate on symbolic links, preventing potential symlink-based attacks. - [EXTERNAL_DOWNLOADS]: The
baseline-collector-agentis tasked with performing web searches to retrieve industry benchmarks (e.g., SaaS conversion rates) when user-specific metrics are not available. This retrieval of external data is essential for the skill's purpose of setting realistic business targets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the user brief and upstream artifacts like
prioritize.md(referenced inSKILL.md). The ingestion surface is managed through a multi-agent pipeline where thecritic-agentandsanity-check-agent(defined inagents/critic-agent.mdandagents/sanity-check-agent.md) verify that the generated outputs meet specific quality and safety gates, such as checking for vanity metrics or aspirational math without justification.
Audit Metadata