go-to-market-audit
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external content from URLs and repositories provided by the user. This ingestion of untrusted data creates a surface for indirect prompt injection, where malicious instructions embedded in external assets (such as README files or product metadata) could influence the agent's behavior or deliverables.\n
- Ingestion points: Phase 0 Reconnaissance (reading READMEs, product/skill definitions, and outputs from referenced repositories or URLs in SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions are provided to isolate or ignore instructions within the processed external content.\n
- Capability inventory: The skill utilizes shell command execution (
dig), file system access (reading referenced assets, writing strategy documents), and network capabilities for reconnaissance.\n - Sanitization: No specific sanitization, filtering, or validation of external content is mentioned before it is processed by the agent.\n- [COMMAND_EXECUTION]: The skill instructs the agent to run the
digutility (dig +short NS <domain>) to check the registration status of proposed domain names. While this is a legitimate part of the auditing process, it involves shell-level command execution based on strings (naming candidates) that may be influenced by analyzed external data or user input, posing a risk of command injection or DNS-based data exfiltration.\n- [EXTERNAL_DOWNLOADS]: During its reconnaissance phase, the skill fetches and reads content from external URLs and repositories to gather evidence for the Go-To-Market strategy.
Audit Metadata