pricing
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill files consist of documentation and templates for business pricing models. No sensitive data access, credential harvesting, or network communication patterns were identified.- [DYNAMIC_EXECUTION]: The script
scripts/validate.pyperforms local file system structure checks and parses configuration files. It usesyaml.safe_load()for YAML processing, which is a recommended security practice to prevent arbitrary code execution.- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill defines parameters forpricing_modelandtarget_segmentinSKILL.md. 2. Boundary markers: These inputs are restricted to specific allowed values via enums in the manifest. 3. Capability inventory: Analysis ofscripts/validate.pyshows no shell execution, file system writes, or network capabilities. 4. Sanitization: Input is validated against a whitelist of expected enum values.
Audit Metadata