diligence-response-prep
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed of static markdown instructions and YAML configuration. It contains no executable code, shell scripts, or permissions to use external tools.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data (investor diligence questions and source materials), creating a potential surface for indirect instructions. However, the risk is negligible due to a lack of system capabilities.
- Ingestion points: The core workflow in
SKILL.mdinstructs the agent to process external "questions" and "source materials". - Boundary markers: The instructions do not define specific delimiters or instructions to ignore commands embedded within the input data.
- Capability inventory: There are no scripts, subprocess calls, or network operations defined in any file.
- Sanitization: No input filtering or validation mechanisms are specified.
Audit Metadata