gtm-buyer-journey
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's functionality is strictly limited to marketing analysis tasks. It references internal resources and interacts with Notion as part of its documented purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (previous steps in the Notion workspace). While this is a standard operational requirement, it provides a surface for indirect prompt injection if those external pages were to be compromised.
- Ingestion points: Reads persona, positioning, value proposition, and competitor data from Notion (SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded instructions are provided in the prompt.
- Capability inventory: The skill performs write operations to Notion.
- Sanitization: No specific sanitization or validation of the ingested content is mentioned.
Audit Metadata