startup-business-analyst-business-case
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user-provided materials, such as pitch decks, market data, and financial models, to generate a business case.
- Ingestion points: The "Gather Context" step (Step 1) explicitly asks for external materials including pitch decks, documents, and financial models.
- Boundary markers: The instructions do not define clear delimiters or specific instructions for the agent to ignore potentially malicious embedded instructions within the user-provided data.
- Capability inventory: The skill is capable of writing a business case to a local markdown file.
- Sanitization: No mechanisms for sanitizing or validating the provided external content are specified.
- [NO_CODE]: The skill consists entirely of markdown instructions for the AI agent and does not include any executable scripts or binary files.
Audit Metadata