market-sizing
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: This skill is designed to ingest and process information from various external and internal sources, such as company documents, team communications, and public market benchmarks. This capability introduces a potential surface for indirect prompt injection, where instructions embedded within the processed data could attempt to influence the agent's behavior.
- Ingestion points: Data is retrieved from context lanes including
~~company_docsand~~team_communication(referenced inSKILL.md), as well as public sources for market data. - Boundary markers: The instructions do not specify the use of strict boundary markers, such as XML tags or specific delimiters, to isolate untrusted data during processing.
- Capability inventory: The skill utilizes tools like
$jupyter-notebooksfor analytical calculations and$spreadsheetsfor data presentation, which are invoked during the modeling phase. - Sanitization: No explicit sanitization or filtering logic is defined for the content retrieved from external sources before it is processed by the agent.
Audit Metadata