website-positioning

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as customer research and competitor analysis to populate positioning strategy templates.\n
  • Ingestion points: The skill pulls insights from customer-research and competitor-alternatives skills to fill the POSITIONING.md file.\n
  • Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore embedded instructions in the ingested data.\n
  • Capability inventory: The skill has the capability to write to the local file system (e.g., creating POSITIONING.md and tests/positioning.spec.ts).\n
  • Sanitization: No explicit sanitization or validation of the external input is mentioned.\n- [DYNAMIC_EXECUTION]: The skill generates and updates a test file (tests/positioning.spec.ts) that contains string-containment tests for website pages. This involves generating script content from templates and local strategy data.\n- [COMMAND_EXECUTION]: The skill instructs the agent or user to run npm test as a completion criterion to verify the positioning strategy through the generated test suite.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 06:30 PM