rfp-response-strategy-synthesis
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill is designed to handle sensitive corporate information, including past proposals, win strategy briefs, and capability statements. Access is limited to SharePoint locations confirmed by the user, and the output is directed to a specific WIP Collaboration Folder.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it ingests untrusted external data from RFP documents.
- Ingestion points: Step 1 (SharePoint-hosted RFP Tracker, Past Proposals, and Win Strategy Briefs).
- Boundary markers: None explicitly defined for ingested data.
- Capability inventory: SharePoint file system access (read/write) and creation of formatted Word documents.
- Sanitization: None; however, the skill mitigates exposure by explicitly forbidding the output of synthesized content into the chat interface, requiring it to be saved directly to the workspace.
Audit Metadata