positioning-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data, including competitor alternatives and customer decision criteria, to form strategic recommendations.\n
- Ingestion points: Data enters the agent context via user-provided evidence and optional external research tools (SKILL.md).\n
- Boundary markers: The skill mandates the use of evidence status labels (fact, inference, assumption, unknown) to delimit content (skill-spec.json).\n
- Capability inventory: The agent can execute internal routing scripts and hook-based evidence gates (SKILL.md).\n
- Sanitization: Strict invariants in the skill specification prohibit the fabrication of facts and require the separation of evidence from inference before completion.\n- [COMMAND_EXECUTION]: The skill instructions and specification direct the agent to utilize local Python scripts (e.g., ../../scripts/dynamic_router.py, ../../scripts/neural_router.py) for routing and managing complex dependency chains. These relative paths point to internal platform utilities rather than arbitrary external commands.
Audit Metadata