product-positioning-doc
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to populate a structured positioning template, creating a surface for potential instruction injection. ● Ingestion points: User-provided fields such as 'Product name', 'Target customer', 'Problem it solves', and 'Differentiation' defined in SKILL.md. ● Boundary markers: The output template uses bracketed placeholders (e.g., [Product Name]) which serve as semantic delimiters but lack explicit instructions to the agent to treat these inputs as data rather than instructions. ● Capability inventory: No dangerous capabilities detected. The skill only produces text output and does not utilize shell commands, file system writes, or network operations. ● Sanitization: No input validation or sanitization logic is present to filter out potential prompt injection strings from user inputs.
Audit Metadata