pricing-strategy
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user-provided business data, such as revenue metrics and customer churn rates, which could be used to influence the agent's output through injection. \n
- Ingestion points: User context collected in
SKILL.mdunder 'Current State' and 'Business Context'. \n - Boundary markers: There are no explicit delimiters or instructions provided to distinguish between the agent's rules and the data it processes. \n
- Capability inventory: The data is used as input for the
scripts/pricing_modeler.pyscript, which performs revenue projections based on the user-provided inputs. \n - Sanitization: The skill does not describe any methods for validating or sanitizing the input data to prevent prompt injection attacks hidden within business metrics.
Audit Metadata