website-positioning
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as customer research and competitor analysis to populate positioning strategy templates.\n
- Ingestion points: The skill pulls insights from
customer-researchandcompetitor-alternativesskills to fill thePOSITIONING.mdfile.\n - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore embedded instructions in the ingested data.\n
- Capability inventory: The skill has the capability to write to the local file system (e.g., creating
POSITIONING.mdandtests/positioning.spec.ts).\n - Sanitization: No explicit sanitization or validation of the external input is mentioned.\n- [DYNAMIC_EXECUTION]: The skill generates and updates a test file (
tests/positioning.spec.ts) that contains string-containment tests for website pages. This involves generating script content from templates and local strategy data.\n- [COMMAND_EXECUTION]: The skill instructs the agent or user to runnpm testas a completion criterion to verify the positioning strategy through the generated test suite.
Audit Metadata