sales-operations-setup
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's README.md recommends a one-line installation method that downloads a shell script from the author's GitHub repository (thierryteisseire) and pipes it directly into bash to automate the setup process.\n- [COMMAND_EXECUTION]: The skill contains local installation scripts (install.sh and install.js) that perform file system operations, such as creating directories in ~/.agents and ~/.claude and establishing symlinks, to deploy the skill files to the appropriate agent directories.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data describing a user's business operations and tools, which could potentially contain hidden instructions.\n
- Ingestion points: User-provided company profiles, current state assessments, and objectives (SKILL.md).\n
- Boundary markers: No explicit delimiters or warnings are defined to separate user-provided data from system instructions.\n
- Capability inventory: The skill has access to a wide range of tools including Read, Write, Edit, Bash, and Grep (SKILL.md).\n
- Sanitization: No specific mechanisms for sanitizing or validating user-provided business data are described.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/thierryteisseire/business_skills/main/install-skill.sh - DO NOT USE without thorough review
Audit Metadata