deal-champion-mapping
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data including contact lists, call notes, and email activity to build stakeholder maps. This presents an attack surface where malicious instructions could be embedded in the source data.
- Ingestion points: The skill collects contact data, titles, and activity logs via user input as defined in the 'Interview' and 'Workflow' sections of SKILL.md.
- Boundary markers: There are no explicit instructions to use delimiters or 'ignore embedded instructions' warnings within the data ingestion workflow.
- Capability inventory: The skill does not have access to tools for network communication, file system modification, or command execution, which significantly limits the potential impact of any injection.
- Sanitization: The instructions do not define methods for sanitizing or filtering external content before it is processed by the agent.
Audit Metadata