go-to-market-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process various workspace context files and user-provided information to generate GTM artifacts, which represents a potential injection surface.
- Ingestion points: The skill reads brand strategy (
strategy/brand.md), personal voice profiles (about/me.md), content ideas (content/ideas.md), and calendar data (content/calendar.md), in addition to processing user-supplied launch details. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the processed files.
- Capability inventory: The skill's capabilities are limited to text and plan generation. It references a shell script,
assess_launch_tier.sh, in thelaunch_tiers.mdfile, but the script content is not included in the skill. - Sanitization: No explicit sanitization or validation of the input data is described in the markdown instructions.
- [NO_CODE]: The provided skill files consist entirely of markdown documentation, templates, and frameworks. No executable scripts, installation commands, or remote code patterns were detected.
Audit Metadata