gtm-action-plan
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a client's Notion workspace, including ICP details, market sizing, and competitor analysis, to generate action plans.
- Ingestion points: External data is pulled from the client's Notion page (e.g., Stage, SMF gap, AGA focus, and artifacts 03-12) as mentioned in the instructions.
- Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions within the ingested Notion data.
- Capability inventory: The skill has capabilities to read from and write to the Notion environment, creating sub-pages and updating statuses.
- Sanitization: The skill lacks explicit sanitization or validation logic for the external content before it is processed for plan generation.
Audit Metadata