saas-ai-moat-and-defensibility
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data, specifically competitor AI claims and foundation-model provider trajectories, which creates a potential surface for indirect prompt injection.\n
- Ingestion points: The skill requires 'Competitor AI claims' and 'Foundation-model provider trajectory' as inputs for its analysis workflow as described in SKILL.md.\n
- Boundary markers: There are no explicit delimiters, such as XML tags or boundary markers, defined to isolate untrusted input from the agent's internal instructions.\n
- Capability inventory: The skill identifies itself as being for 'read-only analysis and drafting' (SKILL.md). No high-privilege tools, subprocess calls, network operations, or file-write capabilities were identified in the skill files.\n
- Sanitization: No explicit data validation, filtering, or sanitization logic is specified for the external content processed by the skill.
Audit Metadata