gtm-infra
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface as it ingests untrusted data from multiple sources to inform its logic.
- Ingestion points: The skill reads business context and ICP profiles from multiple JSON files located in the
data/gtm/directory. - Boundary markers: The instructions do not define delimiters or specific constraints to prevent the AI from following malicious instructions that might be embedded within those data files.
- Capability inventory: The skill has the capability to write configuration files and documentation to the local file system (e.g.,
stack.json,runbooks/). - Sanitization: There is no mention of sanitization, schema validation, or content filtering for the data ingested from the project files.
- [NO_CODE]: The skill consists solely of markdown instructions for the AI agent and does not include any Python scripts, Node.js packages, or binary executables.
Audit Metadata