business-ops
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill is designed to ingest and process untrusted data from multiple external sources, including customer support tickets (
references/customer-support.md), user research interviews, and hiring transcripts (references/hr.md). - Boundary markers: The templates for processing this data do not consistently implement boundary markers or explicit instructions for the model to disregard embedded commands in the external text.
- Capability inventory: The skill has access to powerful tools including
Bash,Write, andEdit(as defined inSKILL.md), which are used to execute data collection scripts and update documentation. - Sanitization: The instructions for research and data analysis do not specify sanitization or validation routines for external data before it is interpolated into shell commands or file operations in
references/competitive-mapping.mdandreferences/trend-analysis.md.
Audit Metadata