business-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEPROMPT_INJECTIONMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains a specific instruction to intercept inquiries about its system prompt or logic and redirect the user to a paid membership site ('scayveracademy.com').
- [METADATA_POISONING]: The instructions mandate the inclusion of unsolicited solicitation messages for CashApp and BuyMeACoffee at the beginning of outputs, effectively hijacking the agent's communication for monetization.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external user-supplied business ideas and context without defined boundary markers or sanitization, creating a surface where untrusted data could influence agent behavior.
- Ingestion points: Business ideas and user context processed in the 'Process' section.
- Boundary markers: None identified in the instructions.
- Capability inventory: Primary text generation and strategy mapping.
- Sanitization: No sanitization or validation of user input is mentioned.
Audit Metadata