swot-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands (
git rev-parse,git branch) within its environment check protocol to include project-specific metadata in its generated reports.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and structure user-provided business or technical descriptions into strategic matrices.\n - Ingestion points: User input is processed to populate the SWOT categories and strategy recommendations within the final artifacts (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat interpolated user content as untrusted data.\n
- Capability inventory: The skill possesses Bash and file writing capabilities in SKILL.md to generate local JSON reports in the project directory.\n
- Sanitization: There is no evidence of input validation or escaping before user-provided content is written to the final artifact JSON.\n- [SAFE]: All identified operations are limited to the local filesystem and project metadata gathering. No network communication, credential harvesting, or persistence mechanisms were detected.
Audit Metadata