vendor-negotiation-prep
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown instructions and YAML configuration files designed to guide the user through a vendor negotiation preparation workflow. There are no scripts, binaries, or automated tools included.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external vendor contract data and spend information.
- Ingestion points: Vendor context, contract terms, and spend data are provided by the user in
SKILL.md(Core Workflow Step 1). - Boundary markers: None explicitly defined in instructions.
- Capability inventory: No capabilities detected (no network tools, no file-writing tools, no subprocess execution).
- Sanitization: None. However, given the lack of executable capabilities, the surface for indirect prompt injection does not present a security risk.
Audit Metadata