02-company-overview
Fail
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes reference links to external regulatory bodies. Automated security scans identified the URL 'https://www.unche.or.ug/' (National Council for Higher Education in Uganda) as being on a malicious blacklist.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted client data to produce business plan narratives. 1. Ingestion points: The skill reads client-provided legal identity evidence, ownership records, and mission statements as defined in 'SKILL.md'. 2. Boundary markers: The instructions include explicit directives to verify claims against evidence and to halt the workflow if legal identity is unverified. 3. Capability inventory: Analysis of 'SKILL.md' and all reference files shows the skill only performs text-based drafting and read-only analysis; no capabilities for subprocess execution, file writing, or network exfiltration were identified. 4. Sanitization: No input sanitization or escaping protocols are specified for the external data ingested from client records.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata