startup-business-analyst-market-opportunity

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data which is then used to generate local files, creating a standard surface for indirect prompt injection.
  • Ingestion points: Step 4 instructs the agent to gather market data from external websites using the WebSearch tool.
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the fetched market data.
  • Capability inventory: The skill utilizes the 'WebSearch' tool for data acquisition and the 'Write' tool to save the resulting analysis to the local filesystem (Step 9).
  • Sanitization: No specific sanitization or validation steps are defined for the content retrieved from the web before it is processed or written to disk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 08:05 PM