negotiation-expert-infrastructure
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests complex JSON data structures containing property information, owner psychology profiles, and valuation details. These free-text fields are processed by the agent to generate reports and strategy recommendations. If the input JSON files originate from an untrusted third party, they could contain embedded instructions designed to influence the agent's output.
- Ingestion points: Input data is loaded via
load_input_data()innegotiation_strategy_planner.pyand processed in theNegotiationSettlementCalculatorclass innegotiation_settlement_calculator.py. - Boundary markers: The skill does not implement explicit boundary markers or 'ignore embedded instructions' warnings when processing natural language fields in
SKILL.mdor the output modules. - Capability inventory: The skill possesses the capability to perform file-write operations (generating reports and JSON results) and execute complex analysis based on the ingested data.
- Sanitization: While
modules/validators.pyprovides robust type and range validation, it does not include sanitization or filtering for potential prompt injection patterns within descriptive text fields.
Audit Metadata