pricing-strategy
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONNO_CODE
Full Analysis
- [METADATA_POISONING]: The skill metadata includes a future update date (2026-03-06) and an author name (Alireza Rezvani) that does not align with the provided author context (kmshihab7878), which may indicate deceptive intent or use of unverified source material.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from
marketing-context.md, creating a surface for indirect prompt injection attacks. * Ingestion points:SKILL.mdandreferences/operating-reference.mdidentifymarketing-context.mdas a primary input. * Boundary markers: The instructions lack specific delimiters or instructions for the agent to distinguish between its own logic and data from the external file. * Capability inventory: The skill generates strategic recommendations and invokes a local Python script. * Sanitization: There are no specified sanitization or validation routines for data read from external sources. - [DYNAMIC_EXECUTION]: The skill utilizes a local script,
scripts/pricing_modeler.py, for complex scenario modeling as mentioned inSKILL.mdandreferences/operating-reference.md. - [NO_CODE]: No executable code files (e.g., .py, .js, .sh) were included in the provided skill files, despite references to a modeling script.
Audit Metadata