pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves ingesting untrusted external data, which creates a potential surface for indirect prompt injection attacks.\n
- Ingestion points: In
SKILL.md(Workflow Step 2), the agent is instructed to useWebSearchandWebFetchto gather pricing data, customer reviews, and market signals from external domains such as competitor websites and review platforms (G2, Capterra, Crunchbase).\n - Boundary markers: Absent. The skill provides no instructions or delimiters to help the agent distinguish between the developer's instructions and potentially adversarial instructions embedded in the retrieved web content.\n
- Capability inventory: The skill has access to
Read,Glob,Grep,WebFetch, andWebSearchtools. While it can read local files and fetch web data, it lacks the ability to execute arbitrary code or exfiltrate sensitive credentials like SSH keys or environment secrets via the network, provided standard tool guardrails are in place.\n - Sanitization: Absent. The data collected from the web is directly used to generate a final
pricing-strategy.mdreport based on the template inreferences/output-template.md.
Audit Metadata