product-methodology
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content such as customer interview transcripts and market research to build a structured report pyramid. This creates a surface for indirect prompt injection where malicious instructions embedded in the source data could influence the agent's actions.
- Ingestion points: Processes external data stored in dossiers within the 03-dossiers/ directory as described in SKILL.md and references/customer-interview-guide.md.
- Boundary markers: The skill specifies metadata headers (Source, Captured, Author, Title) and SOURCES sections, but these do not provide robust isolation or delimiters for untrusted content.
- Capability inventory: The skill instructions involve local file system operations including directory creation (mkdir) and file writing across the multi-phase production flow.
- Sanitization: No sanitization, validation, or filtering mechanisms for external data are specified in the instructions.
Audit Metadata