product-intelligence
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes untrusted data from multiple external sources.\n
- Ingestion points: Ingests data from support tickets, app reviews, community posts, NPS comments, and sales call notes (defined in SKILL.md).\n
- Boundary markers: Absent. The instructions do not provide delimiters or warnings to the agent to ignore potentially malicious commands embedded in user feedback.\n
- Capability inventory: The skill performs significant decision-making tasks including feedback clustering, RICE-score ranking, roadmap planning, and prioritization.\n
- Sanitization: Absent. There is no evidence of filtering or validation of the ingested external content.\n- [NO_CODE]: The skill consists purely of markdown instructions and YAML metadata without any associated executable code, scripts, or binary files.
Audit Metadata