pricing-strategy

Warn

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONNO_CODE
Full Analysis
  • [METADATA_POISONING]: The skill metadata includes a future update date (2026-03-06) and an author name (Alireza Rezvani) that does not align with the provided author context (kmshihab7878), which may indicate deceptive intent or use of unverified source material.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from marketing-context.md, creating a surface for indirect prompt injection attacks. * Ingestion points: SKILL.md and references/operating-reference.md identify marketing-context.md as a primary input. * Boundary markers: The instructions lack specific delimiters or instructions for the agent to distinguish between its own logic and data from the external file. * Capability inventory: The skill generates strategic recommendations and invokes a local Python script. * Sanitization: There are no specified sanitization or validation routines for data read from external sources.
  • [DYNAMIC_EXECUTION]: The skill utilizes a local script, scripts/pricing_modeler.py, for complex scenario modeling as mentioned in SKILL.md and references/operating-reference.md.
  • [NO_CODE]: No executable code files (e.g., .py, .js, .sh) were included in the provided skill files, despite references to a modeling script.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 21, 2026, 05:05 PM