positioning-doc
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external markdown files to populate its positioning templates, which introduces a potential surface for indirect prompt injection if the source files are compromised.
- Ingestion points: The skill reads untrusted content from 'knowledge/icp/personas.md' and 'knowledge/markets/competitors.md'.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious embedded content within the ingested files.
- Capability inventory: The skill is authorized to perform file-write operations to 'knowledge/markets/positioning.md' and the 'output/positioning-doc/' directory.
- Sanitization: The skill lacks explicit sanitization or validation of the input data before it is interpolated into the final output document.
Audit Metadata