objection-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/analyze.py) to perform arithmetic and data processing tasks. The script relies solely on the Python standard library and does not execute arbitrary shell commands or external binaries. - [INDIRECT_PROMPT_INJECTION]: The skill processes external conversation data (replies from prospects), which is a potential surface for indirect prompt injection. The skill mitigates this by using a deterministic script for processing and enforcing data minimization, such as truncating verbatim text to 200-400 characters.
- [EXTERNAL_DOWNLOADS]: The README provides installation commands that fetch the skill from the vendor's GitHub repository (
LaGrowthMachine). These are standard installation procedures for the GTM System suite. - [DATA_EXFILTRATION]: The skill stores processed 'playbook' data in a local directory (
~/.gtm-skills/objection-analyzer/). It implements data minimization by storing only initials, company names, and short snippets of conversation rather than full contact details or message bodies.
Audit Metadata