customer-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential injection surface by ingesting user-provided data, such as interview notes and customer segments, which are processed to generate business validation scorecards.
- Ingestion points:
scripts/main.pyvia theadd-interviewcommand's--notesand--segmentparameters. - Boundary markers: The instructions in
SKILL.mdprovide structural templates for the agent, though the companion script does not implement programmatic delimiters. - Capability inventory: The skill's capabilities are restricted to reading and writing a local
customer_discovery.jsonfile in the execution directory. It does not use network tools, shell execution, or high-privilege system APIs. - Sanitization: Input data is stored and summarized as provided without specific character escaping or filtering.
Audit Metadata