positioning-mapper
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No evidence of malicious code, obfuscation, or unauthorized network exfiltration was detected. The skill follows established security best practices through a structured contract and routing policy. \n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the ingestion of external marketing data, which is appropriately mitigated by internal guardrails. \n
- Ingestion points: The skill reads scraped page text, customer reviews, comments, emails, and third-party data exports as identified in SKILL.md. \n
- Boundary markers: The instructions explicitly define these sources as untrusted and mandate that the agent must not follow embedded instructions from this evidence. \n
- Capability inventory: The skill is capable of generating positioning artifacts and coordinating with marketing platforms (e.g., Ads, CRM, ESPs) via optional connectors as described in SKILL.md and references/connectors.md. \n
- Sanitization: The skill requires strict evidence labeling (measured, user-provided, proxy) to maintain the integrity of its analysis.
Audit Metadata