gtm-pricing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external business data, such as Ideal Customer Profile (ICP) details, competitor information, and pricing metrics, which could potentially contain malicious instructions.
- Ingestion points: User-provided inputs for GTM strategy worksheets, ICP firmographics, and competitive battle cards defined in
SKILL.mdandreference/gtm.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands in the processed data are present.
- Capability inventory: The skill instructs the agent to perform file system write operations (writing the outcome sidecar in
SKILL.md). - Sanitization: There is no evidence of input validation or sanitization for the data processed by the GTM framework.
- [COMMAND_EXECUTION]: The skill instructs the agent to write a JSON sidecar file to the local file system (
~/.claude/skill-analytics/last-outcome-gtm-pricing.json) upon completion of its tasks. This represents a file-write capability triggered by the skill's instructions.
Audit Metadata