lean-startup
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted data provided by users, such as startup visions, assumptions, and interview results, which could serve as a vector for hidden instructions.
- Ingestion points: User-provided venture descriptions, leap-of-faith assumptions, and customer research data processed via instructions in
SKILL.md. - Boundary markers: Present; the skill defines a rigid
Output Templateand aVerificationchecklist to constrain agent behavior and response structure. - Capability inventory: The execution environment is restricted to
Read,Grep,WebSearch, andWebFetchtools as specified in theSKILL.mdfrontmatter. - Sanitization: Present; the skill includes explicit warnings to avoid processing personal identifiers, private financials, or confidential roadmap details unless explicitly permitted.
- [EXTERNAL_DOWNLOADS]: The skill references external methodology resources from
theleanstartup.comandleanstartup.coto ground the agent's logic in industry-standard principles.
Audit Metadata