gtm-meddpicc-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from CRM sources, including call transcripts, deal notes, and meeting history, which are then used to generate deal scores and coaching recommendations.\n
- Ingestion points: CRM data access (Step 1),
profiles/client-profile.md(Context section).\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within the ingested notes.\n
- Capability inventory: The skill possesses the ability to generate and execute Python scripts for PDF creation.\n
- Sanitization: No evidence of sanitization or validation of the input CRM data before it is processed by the agent.\n- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate PDF artifacts using Python and the
reportlablibrary (Artifact Generation section). This involves the generation and execution of code at runtime.
Audit Metadata