competitor-messaging-matrix
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local JavaScript engine
resources/messaging-matrix.jsto process competitor data. The script is entirely self-contained, requiring no external dependencies and performing no file system writes or network calls. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external competitor copy (headlines, subheads, and body text). While this represents a data ingestion surface, the risk is mitigated because the processing is performed by a specialized local script with limited capabilities (text analysis and console output) and no access to dangerous tools or APIs.
- [EXTERNAL_DOWNLOADS]: The documentation includes links to the publisher's official website at
aajconsult.comfor supporting marketing templates and blogs. These are informational references and do not involve the download of executable scripts or code.
Audit Metadata