exiting-company

Fail

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The experts.md file contains links to external websites for GTM experts. Automated scanners have flagged keithrosen.com and forgetthefunnel.com as malicious or blacklisted. While these are recognized industry resources for sales coaching and growth marketing, the flags indicate a potential reputation risk or historical domain compromise.
  • [COMMAND_EXECUTION]: Includes a utility script scripts/check-output.py used for local validation of generated deliverables. The script performs local file reads to check for the presence of specific keywords. It does not perform network operations, execute arbitrary shell commands, or attempt privilege escalation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process business metrics and customer data. Ingesting untrusted data such as customer-provided churn reasons or account names creates a surface for indirect prompt injection. Ingestion points: due-diligence-metrics-pack.md. Boundary markers: Absent. Capability inventory: The skill primarily performs analytical reporting with no dangerous autonomous capabilities. Sanitization: Absent. This category is assessed as a low-severity vulnerability surface.
Recommendations
  • Contains 8 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 10, 2026, 12:53 PM