gtm-value-prop
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Notion pages (Positioning 06, Market/Persona 01-03) to generate marketing content.
- Ingestion points: Processes untrusted content such as 'verbatim' customer pains and market descriptions from Notion.
- Boundary markers: Lacks explicit instructions or delimiters to prevent the agent from following malicious commands embedded in the ingested text.
- Capability inventory: The skill is authorized to write output back to Notion; no high-risk command execution or external network capabilities were detected.
- Sanitization: There is no evidence of input sanitization or filtering for the data retrieved from Notion.
Audit Metadata