gtm-offers
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could lead to indirect prompt injection if those sources are compromised.
- Ingestion points: The skill reads market, ICP, tiers, positioning, and value proposition data from Notion pages (specifically steps 3-7 of the GTM flow), as indicated in the description and argument-hint.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its core instructions and the data fetched from Notion, nor are there warnings to ignore instructions embedded within that data.
- Capability inventory: The skill has the capability to write structured content back to Notion, including offer ladders, Grand Slam cards, and use cases.
- Sanitization: No sanitization, validation, or escaping logic is defined for the content retrieved from Notion before it is interpolated into the agent's prompt context.
Audit Metadata