partner-marketplace-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill provides instructional logic for business strategy without any unauthorized tool use or dangerous operations.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface through the ingestion of untrusted data from user interviews and web search results.
- Ingestion points: Data is gathered from user responses during the Interview phase and from external web content when researching competitor listings and marketplace fee schedules.
- Boundary markers: The skill mitigates risks by requiring the agent to 'flag provenance' on all benchmarks and explicitly mark unconfirmed data as 'unverified'.
- Capability inventory: The skill's capabilities are limited to generating structured strategy memos and performing standard web searches; no risky file-system or subprocess operations are present.
- Sanitization: The instructions provide a qualitative sanitization layer by directing the agent to treat third-party ROI figures as 'marketing' and to use company-specific baselines rather than adopting external figures as authoritative.
Audit Metadata