02-stage-diagnostic
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs standard business logic for agency growth stage diagnosis, utilizing Notion for data storage and context retrieval without any signs of malicious intent or safety bypasses.- [INDIRECT_PROMPT_INJECTION]: The skill processes external agency data, creating a potential surface for indirect prompt injection.
- Ingestion points: Processes 'Company Snapshot' data retrieved from Notion pages or provided in the chat context.
- Boundary markers: No specific delimiters or safety instructions are defined to separate agency data from diagnostic logic.
- Capability inventory: The skill is authorized to update Notion page properties (e.g., Stage, SMF gap, AGA focus) and create sub-pages.
- Sanitization: No explicit sanitization or validation of the input data is described.
- Assessment: This ingestion is core to the diagnostic purpose of the skill and does not appear to be designed for malicious exploitation.
Audit Metadata