win-loss-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of deal notes, call summaries, and interview responses as defined in
SKILL.md. This represents a potential surface for indirect prompt injection if the ingested content contains malicious instructions. - Ingestion points:
SKILL.mdspecifies the use of deal notes, call summaries, and interview responses in Step 1. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the processed deal data.
- Capability inventory: The skill is configured with
ReadandWritetool permissions. - Sanitization: There are no explicit sanitization or validation steps for the incoming text data before it is analyzed by the agent.
Audit Metadata