event-market-fit
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown instructions and reference documentation. It does not contain any executable scripts, binaries, or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data regarding event metrics through its interview workflow (SKILL.md). 1. Ingestion points: Manual input of event stage, community size, and sales figures during the user interview. 2. Boundary markers: None. 3. Capability inventory: The skill is restricted to providing text-based analysis and lacks capabilities for file writing, network access, or subprocess execution. 4. Sanitization: None. Due to the lack of exploitable side-effects, the risk of injection-based exploitation is negligible.
- [REMOTE_CODE_EXECUTION]: The skill references other tools in the 'samber' namespace (e.g., samber/dev-event-organizer-skills). These are internal platform references to other modular instructions and do not constitute a remote code execution threat.
Audit Metadata