weekly-dealer-review
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses specialized tools and agents (e.g.,
marketcheck-cowork-plugin:lot-scanner,marketcheck-cowork-plugin:lot-pricer) to process dealership inventory. All tool calls and agent interactions are consistent with the stated purpose of market analysis. - [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface where data from one agent is passed to another (Wave 1 output to Wave 2).
- Ingestion points: Data from the
marketcheck-profile.mdproject memory file and results from thelot-scannersub-agent. - Boundary markers: None explicitly provided in the prompt templates to delimit the input data.
- Capability inventory: The skill uses the Agent tool to spawn multiple sub-agents for data processing.
- Sanitization: No explicit sanitization or validation of the inventory data is described before passing it to the pricing agent.
Audit Metadata