pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a local Python script (
scripts/pricing_modeler.py) for financial modeling. This script uses standard libraries and processes data from standard input or local files without executing shell commands or spawning subprocesses. - [INDIRECT_PROMPT_INJECTION]: The skill is instructed to ingest data from an external file (
marketing-context.md) to tailor its recommendations. This ingestion point represents a surface for indirect prompt injection if the context file contains adversarial instructions intended to influence the agent's behavior. - Ingestion points:
marketing-context.md(read as skill context). - Boundary markers: No delimiters or protective instructions are specified for this external content.
- Capability inventory: The skill's primary capabilities are limited to providing text-based strategic advice and executing the local modeling script.
- Sanitization: No explicit sanitization or validation of the context file content is performed.
Audit Metadata