negotiate

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it is designed to ingest and analyze untrusted external data in the form of contract files.
  • Ingestion points: Reads contract or agreement files (.md, .txt, .pdf) using the Read tool as specified in SKILL.md.
  • Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions embedded within the processed contract text.
  • Capability inventory: The skill utilizes Read, Glob, and Grep tools and generates a new Markdown output file (NEGOTIATION-STRATEGY-{contract-name}.md).
  • Sanitization: There are no specified sanitization or filtering steps for the ingested contract content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM
Security Audit — agent-trust-hub — negotiate