sales-objection-handling
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed of markdown-based instructions and reference materials for sales methodologies. It contains no executable scripts (Python, Node.js, Shell), privilege escalation attempts, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data regarding sales scenarios, which creates a potential surface for indirect prompt injection.
- Ingestion points: User-supplied deal context, prospect verbatim quotes, and competitor names (processed in SKILL.md under the 'Interview' and 'Workflow' sections).
- Boundary markers: The instructions do not define specific delimiters or escaping mechanisms for user-supplied data.
- Capability inventory: The skill has no capabilities to write files, perform network operations, or execute system commands. The 'allowed-tools' field is empty, and the instructions do not request any high-risk tool usage.
- Sanitization: There is no evidence of sanitization or filtering applied to external content.
- Result: Because the agent lacks dangerous capabilities in this skill's context, the indirect injection surface poses no material security risk.
- [SAFE]: No network access or data exfiltration patterns were detected. The skill does not attempt to access sensitive local files (e.g., SSH keys, credentials) or perform unauthorized network requests.
- [SAFE]: The skill includes strong ethical constraints, explicitly prohibiting the manufacturing of urgency, the use of unverified social proof, and the implementation of aggressive rebuttal quotas that might violate consumer protection laws.
Audit Metadata