business-review
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes external documents and product evidence (SKILL.md), which creates a risk where instructions embedded in those documents could be processed by the agent.
- Ingestion points: The skill processes user-supplied materials and external evidence as noted in SKILL.md.
- Boundary markers: Absent; the instructions do not explicitly tell the agent to ignore instructions embedded in the analyzed data.
- Capability inventory: The skill is read-only on source materials but has the capability to write artifacts to specified repository paths or the
docs/directory. - Sanitization: No sanitization or filtering of external input is specified.
Audit Metadata