offer-strategy

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is configured to invoke scripts located outside its immediate directory, specifically ../../scripts/dynamic_router.py, ../../scripts/neural_router.py, and ../../scripts/skill_router.py. These scripts are used to manage workflow routing and dependency management based on user requests.
  • [DYNAMIC_EXECUTION]: The skill uses a dynamic router to "build a bounded DAG" (Directed Acyclic Graph) at runtime when explicit dependency chains are requested. This represents a dynamic assembly of execution logic based on user input.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest "current external research" to support material claims. This creates a potential surface for indirect prompt injection if external sources contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: Material claims are ingested from external research and references/skill-spec.json.
  • Boundary markers: The skill employs an "Evidence discipline" that requires classifying claims as fact, inference, assumption, or unknown, which serves as a logical delimiter for processed data.
  • Capability inventory: The skill has the capability to execute subprocesses via the mentioned routing scripts and interact with multiple specialist agents (response-strategist, marketing-skeptic).
  • Sanitization: No technical sanitization or filtering of external research text is specified, though instructions mandate verifying claims against primary evidence.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:46 AM