product-intelligence

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes untrusted data from multiple external sources.\n
  • Ingestion points: Ingests data from support tickets, app reviews, community posts, NPS comments, and sales call notes (defined in SKILL.md).\n
  • Boundary markers: Absent. The instructions do not provide delimiters or warnings to the agent to ignore potentially malicious commands embedded in user feedback.\n
  • Capability inventory: The skill performs significant decision-making tasks including feedback clustering, RICE-score ranking, roadmap planning, and prioritization.\n
  • Sanitization: Absent. There is no evidence of filtering or validation of the ingested external content.\n- [NO_CODE]: The skill consists purely of markdown instructions and YAML metadata without any associated executable code, scripts, or binary files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — product-intelligence