startup-business-analyst-market-opportunity

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions define a legitimate business analysis workflow without any detected malicious patterns, obfuscation, persistence mechanisms, or unauthorized data access. The use of tools like WebSearch and Write is restricted to its primary function.- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it processes external data from WebSearch and possesses file-writing capabilities, although this risk is inherent to its market research function. Ingestion points: External market research data gathered in Step 4 via the WebSearch tool. Boundary markers: Absent; no specific instructions are provided to the agent to treat search results as untrusted content. Capability inventory: The skill utilizes the Write tool in Step 9 to save the final report to the local filesystem. Sanitization: No specific sanitization or validation of the external content is mentioned before it is interpolated into the final markdown report.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 07:55 AM
Security Audit — agent-trust-hub — startup-business-analyst-market-opportunity