porters-five-forces
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts external input through the $ARGUMENTS variable, which is used to generate a strategic analysis. This creates a surface for indirect prompt injection where malicious instructions could be provided as part of the industry data. However, the skill does not possess any tools or capabilities (such as network access, file system modification, or command execution) that would allow such an injection to perform harmful actions. Ingestion points: $ARGUMENTS in SKILL.md. Boundary markers: None identified. Capability inventory: No dangerous tools or commands identified. Sanitization: No explicit sanitization of input.
- [SAFE]: The skill includes a reference link to a business strategy resource (productcompass.pm). This link is transparently presented and matches the author's identified domain, presenting no security risk.
Audit Metadata