incrementality-design
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided marketing data and evidence to generate design recommendations. It implements several security controls to mitigate potential injection risks:
- Ingestion points: Processes user objectives, constraints, and primary evidence through its workflow steps in
references/skill-spec.json. - Boundary markers: Requires the agent to classify all material claims using specific status labels:
fact,inference,assumption, orunknownas per theEvidence disciplineinSKILL.md. - Capability inventory: The skill can invoke internal routing scripts (
dynamic_router.py,neural_router.py) and specialized agents (measurement-strategist.md,marketing-skeptic.md) as defined inSKILL.mdandreferences/skill-spec.json. - Sanitization: The
Evidence disciplineandinvariantsexplicitly prohibit the fabrication of research, tool calls, or metrics, and mandate the separation of inference from evidence.
Audit Metadata