pricing-and-wtp
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill's behavior is consistent with its documentation.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads local project files from 'memory/ideas/' and market data from 'memory/market_insights/'. This file access is restricted to the local environment and is necessary for the analytical function of the skill. No network calls or data exfiltration attempts were found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data sourced from external platforms (Reddit, App Store, TikTok). While this constitutes an attack surface, the risk is negligible because the ingested data is used strictly for parameter estimation (pricing thresholds, conversion rates) and is output into a structured JSON file. The skill does not possess any dangerous capabilities, such as code execution or network operations, that could be exploited via malicious instructions embedded in the market data.
Audit Metadata