product-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The script
scripts/okr_cascade_generator.pyprovides a surface for indirect prompt injection by interpolating untrusted data into its output text. - Ingestion points: The script ingests untrusted data through the
--metrics(JSON string) and--teams(comma-separated string) command-line arguments, as well as by referencing external JSON files in thereferences/directory. - Boundary markers: The generated OKR output does not use any boundary markers or special instructions to prevent an LLM from interpreting embedded commands within the metrics data.
- Capability inventory: The skill is limited to printing to the console and does not have dangerous capabilities like file writing, network access, or command execution, which significantly mitigates the risk.
- Sanitization: There is no sanitization or escaping of the user-provided values before they are used to replace placeholders in the OKR templates.
Audit Metadata