value-chain-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references authoritative truth sources from well-known organizations including Harvard Business School (hbs.edu), Harvard Business Review (hbr.org), Wiley Online Library (wiley.com), and the Greenhouse Gas Protocol (ghgprotocol.org).
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection due to its use of web-based research tools to gather evidence for analysis.
- Ingestion points: External data is ingested from the web using the
WebSearchandWebFetchtools as described in the workflow and allowed-tools configuration. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the retrieved web content.
- Capability inventory: The skill's capabilities are restricted to information retrieval and processing (
Read,Grep,WebSearch,WebFetch). It lacks dangerous capabilities such as file system modification, command execution, or network exfiltration of sensitive local data. - Sanitization: There are no explicit sanitization or validation steps mentioned for the content fetched from external sources.
- Ingestion points: External data is ingested from the web using the
Audit Metadata