bid-tender-review
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions (SKILL.md) and does not include any Python scripts, Node.js code, shell scripts, or binaries. It functions as a behavioral prompt for the AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted documents such as construction bids, quotes, and scope specifications. This presents a potential surface for indirect prompt injection if an attacker were to embed malicious instructions within those documents.
- Ingestion points: The skill processes 'The bid/quote itself', 'Scope of work / bid documents', and 'Competing bids' as specified in the Required Inputs section of SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or boundary markers to separate the untrusted input from the agent's system instructions.
- Capability inventory: The skill does not utilize any tools or execute any commands; its output is restricted to generating a text-based report.
- Sanitization: There are no instructions provided for the sanitization or validation of the input data before processing.
Audit Metadata