startup-analyst
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified across the 11 threat categories. The skill instructions focus on legitimate business analysis tasks using standard frameworks like Porter's Five Forces and TAM/SAM/SOM methodologies.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from web search results and user inputs. While this represents a standard architectural surface for indirect prompt injection, it is inherent to the skill's primary function and is mitigated by instructions requiring data triangulation, source citation, and assumption documentation.\n
- Ingestion points: External market data from web searches and user-provided business details.\n
- Boundary markers: The instructions do not include specific delimiters for search results but enforce strict validation and citation standards.\n
- Capability inventory: Web search, calculation capabilities, and read/write access for document creation.\n
- Sanitization: None explicitly defined for external data ingestion.
Audit Metadata