startup-business-analyst-financial-projections

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest detailed business and financial data from the user and generate formatted reports, which creates a potential vector for malicious data to influence the agent's behavior.
  • Ingestion points: Extensive user inputs are requested in 'Step 1: Gather Model Inputs' within SKILL.md, including business models and growth assumptions.
  • Boundary markers: The instructions do not define delimiters or specific 'ignore embedded instructions' directives to isolate user data from the agent's control flow.
  • Capability inventory: The skill is configured with access to Read, Write, Edit, Glob, Grep, Bash, WebSearch, and WebFetch tools as specified in the frontmatter of SKILL.md.
  • Sanitization: There are no provided instructions for escaping or validating the user-provided data before it is processed or written to markdown files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:32 PM