win-loss-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of instructional markdown and analytical frameworks. It does not include any executable scripts, binary files, or network-enabled tool configurations. The reference to .agents/sales-context.md is a standard pattern for retrieving project-specific context.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a defined surface for processing external, untrusted data.\n
  • Ingestion points: The agent is instructed to ingest deal notes, CRM exports, and call transcripts, as well as read from the .agents/sales-context.md file.\n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the framework to protect against malicious payloads in the analyzed data.\n
  • Capability inventory: The skill definition does not contain any scripts, system commands, or tool requests that could be abused if an injection were successful.\n
  • Sanitization: No methods for filtering or sanitizing the content of user-provided deal data are specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 07:43 AM