startup-business-analyst-market-opportunity

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting external data from web searches and local files (e.g., resources/implementation-playbook.md) to generate market reports. * Ingestion points: WebSearch tool results and the resource file resources/implementation-playbook.md referenced in the instructions. * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when processing these external data sources. * Capability inventory: The skill uses the Write tool to create and save markdown report files, which are generated based on the potentially untrusted data. * Sanitization: No evidence of input validation, data escaping, or content filtering was found in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 02:32 PM
Security Audit — agent-trust-hub — startup-business-analyst-market-opportunity