dynamic-pricing
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from the codebase and user-supplied arguments without explicit sanitization or boundary markers.
- Ingestion points: User-provided
$ARGUMENTSand various codebase files identified during the system discovery phase (SKILL.md). - Boundary markers: Absent; the skill does not use delimiters to distinguish between its own instructions and the data being analyzed.
- Capability inventory: The agent performs extensive file system reads for discovery and has file-write capabilities for report generation (
docs/dynamic-pricing-analysis.md) and telemetry logging (~/.claude/projects/skill-telemetry.md). - Sanitization: No instructions are provided to escape, validate, or filter content retrieved from the analyzed project files before incorporating it into the analysis flow.
Audit Metadata