pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it processes external project context and user-supplied data files.\n
- Ingestion points: The skill instructs the agent to read
marketing-context.mdfor context and utilizesscripts/pricing_modeler.pywhich accepts input from a JSON file.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the instructions.\n
- Capability inventory: The skill is restricted to providing business advice and performing revenue projections. There are no tools or functions for network communication, system modification, or arbitrary code execution.\n
- Sanitization: Data is processed as text or parsed as JSON without specific security sanitization.\n- [SAFE]: The included Python script
scripts/pricing_modeler.pyis safe and performs legitimate business logic. No other security concerns were identified in the instruction files or reference materials.
Audit Metadata