stakeholder-map
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a purely instructional template for business analysis. It does not execute scripts, download binary payloads, or attempt to exfiltrate data.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided context and documents (such as org charts or project briefs). While this constitutes an attack surface for indirect prompt injection, the risk is mitigated by the skill's limited capabilities, which are restricted to generating markdown text without access to sensitive system tools or network operations.
- [EXTERNAL_DOWNLOADS]: The skill contains references to external educational resources (productcompass.pm). These are standard markdown links for further reading and do not involve automated downloads or code execution.
Audit Metadata