scope-qualifier
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a structured framework for qualifying sales opportunities based on text inputs like transcripts or notes. It does not perform any sensitive file access, network exfiltration, or command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent's context through call notes, transcripts, or email threads provided by the user (noted in
SKILL.md). - Boundary markers: The instructions do not mandate the use of delimiters or specific "ignore embedded instructions" warnings for the processed data.
- Capability inventory: The skill is limited to generating text-based analysis, verdicts, and CRM field sets; it does not utilize tools for subprocess execution, file writing, or network communication.
- Sanitization: There are no instructions for sanitizing or escaping the content of the ingested transcripts.
Audit Metadata