devtools-pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill and its referenced files do not contain any executable scripts, binary files, or network-enabled commands. The logic is entirely based on instructional guidance for the AI agent.
- [SAFE]: All external references and citations target reputable industry research (e.g., OpenView, Matrix Partners, CISA) or vendor-local resources belonging to the author (
samber/developer-relations-skills). These are documented neutrally as sources for pricing benchmarks. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data during its 'Interview' phase to generate a pricing strategy.
- Ingestion points: User answers to the 13-question interview in
SKILL.mdare integrated into the agent's reasoning process. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' instructions for the data ingested from the user.
- Capability inventory: The skill's output is limited to text generation (the pricing memo). There are no capabilities for shell execution, file system modification, or network requests across any of the referenced files.
- Sanitization: No specific input sanitization or validation logic is implemented.
Audit Metadata