ecommerce-business-model-diagnostic

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill instructions handle highly sensitive business data, including financial records, order analytics, and payment information. To mitigate exposure risks, the skill mandates a 'data-minimisation' approach and requires the production of 'donor-safe' summaries that aggregate or anonymize sensitive details to protect company confidentiality.
  • [INDIRECT_PROMPT_INJECTION]: The diagnostic process involves ingesting data from external and potentially untrusted sources, such as storefront content and founder interview notes. The skill manages this attack surface by establishing a 'Capability Contract' that enforces read-only access by default and instructs the agent to verify all management assertions against system-generated transaction evidence.
  • [COMMAND_EXECUTION]: The skill defines a capability contract that explicitly prohibits the agent from performing mutations on production systems (e.g., changing prices, storefront settings, or customer data) without explicit authority and security review, effectively limiting the agent's operational scope to assessment and reporting.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 08:37 AM