porters-five-forces
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill uses a standard orchestration pattern to perform industry analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided industry names and context into sub-agent prompts. While it lacks explicit boundary markers or input sanitization, the impact is limited to the content of the generated report, and no high-risk capabilities are exposed to this input.
- [COMMAND_EXECUTION]: The skill instructs the agent to save markdown reports to the working directory. This is consistent with its stated purpose of generating analysis documentation.
- [REMOTE_CODE_EXECUTION]: The skill mentions the use of 'available retrieval tools' by sub-agents to gather evidence, which refers to standard platform-provided capabilities rather than unverified external script execution.
Audit Metadata